Back to Database
Status published
Low
CVE-2004-2394
Off-by-one error in passwd 0.68 and earlier, when using the...
Vulnerability Description
Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-2394
Credits & Attribution
No credits recorded in the NVD database.
References
More from mandrakesoft
View All →CVE-2007-1352
Integer overflow in the FontFileInitTable function in X.Org libXfont before...
Low
3.8
CVE-2005-2377
nss_ldap 181 to versions before 213, as used in Mandrake...
Medium
5
CVE-2005-1379
The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs...
Medium
4.6
CVE-2004-2395
Memory leak in passwd 0.68 allows local users to cause...
Low
2.1
CVE-2004-2392
libuser 0.51.7 allows attackers to cause a denial of service...
Medium
5
Affected Vendor
mandrakesoft
View all reports →Affected Software
mandrake multi network firewall, mandrake linux, mandrake linux corporate server
Vulnerable Versions:
8.2, 9.0, 9.1, 9.2, 10.0, 2.1
Timeline
Official Publish:
August 17th, 2005
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.