CVE-2008-3188

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-327

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00008.htmlMailing List, Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.htmlMailing List, Vendor Advisory
http://secunia.com/advisories/31096Broken Link, Third Party Advisory
http://secunia.com/advisories/31339Broken Link, Third Party Advisory
http://www.securityfocus.com/bid/30301Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/43927Third Party Advisory, VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00008.htmlMailing List, Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.htmlMailing List, Vendor Advisory
http://secunia.com/advisories/31096Broken Link, Third Party Advisory
http://secunia.com/advisories/31339Broken Link, Third Party Advisory
http://www.securityfocus.com/bid/30301Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/43927Third Party Advisory, VDB Entry

Timeline

Published: Jul 22, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-31897.5SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL commands via the id p CVE-2008-31906.8Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute arbitrary local files CVE-2008-31916.8Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magic_quotes_gpc is disabled, allow remote attackers to execute ar CVE-2008-31926.8Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a ..CVE-2008-31937.5SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default CVE-2008-31946.8Multiple directory traversal vulnerabilities in data/inc/themes/predefined_variables.php in pluck 4.5.1 allow remote attackers to include an CVE-2008-31956.8Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows r CVE-2008-31967.8skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to c CVE-2008-31973.5Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a CVE-2008-31987.5Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as d CVE-2008-31997.8Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service (stack consumption) via CVE-2008-32007.5SQL injection vulnerability in vlc_forum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the