CVE-2019-3700 yast: Fallback to DES without configuration in /etc/login.def
An attacker with access to password hashes can crack DES-encrypted passwords due to insecure defaults in yast2-security.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-3700?
CVE-2019-3700 is a low-severity vulnerability in openSUSE Factory, published on 24 Jan 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 when configuration files that set secure settings were moved to a different location. As of the 20191022 snapshot the insecure default settings were used until yast2-security switched to stronger defaults in 4.2.6 and used the new configuration file locations. Password created during this time used DES password encryption and are not properly protected against attackers that are able to access the password hashes.
Weakness: CWE-327
Which versions are affected by CVE-2019-3700?
It affects 1 product.
Linux distribution packages (1)
yast2-security openSUSE:Tumbleweed | All versions | 4.4.1-1.2 |
Products include Suse Yast2-Security.
How do I fix CVE-2019-3700?
Upgrade to a fixed version.
Is CVE-2019-3700 being exploited?
There is no known exploitation of CVE-2019-3700 in the wild and no public exploit code.
Sources
Also known as GHSA-6ff8-jh7v-68j7, openSUSE-SU-2024:11536-1.