CVE-2011-4931

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

gpw generates shorter passwords than required

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-521

Affected software

Vendor	Product	Versions
gpw	gpw	0.0.19940601-8.1

References

http://www.openwall.com/lists/oss-security/2012/01/17/13Mailing List, Third Party Advisory
https://access.redhat.com/security/cve/cve-2011-4931Broken Link, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-4931Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651510Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/01/17/13Mailing List, Third Party Advisory
https://access.redhat.com/security/cve/cve-2011-4931Broken Link, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-4931Third Party Advisory

Timeline

Published: Oct 29, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-49327.5Eval injection vulnerability in ip_cms/modules/standard/content_management/actions.php in ImpressPages CMS 1.0.12 and possibly other versons CVE-2011-49377.5Joomla! 1.7.1 has core information disclosure due to inadequate error checking.CVE-2011-49386.1Multiple cross-site scripting (XSS) vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the P CVE-2011-49396.4The pidgin_conv_chat_rename_user function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service (NULL po CVE-2011-49402.6The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x befor CVE-2011-49416.8Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown at CVE-2011-49424.3Multiple cross-site scripting (XSS) vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allow remote attackers to inject a CVE-2011-49439.8ImpressPages CMS v1.0.12 has Unspecified Remote Code Execution (fixed in v1.0.13)CVE-2011-49441.9Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces CVE-2011-49456.9PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without CVE-2011-49466.8SQL injection vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to execute arbitrary SQL commands CVE-2011-49476.8Cross-site request forgery (CSRF) vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to hijack the