CVE-2014-0083: net-ldap has weak salt when generating… – CVSS 5.5 · Watchpost

← All vulnerabilities

net-ldap has weak salt when generating passwords

中危 5.5CVE-2014-0083 · GHSA-qwgm-mxm4-3q2c · Published 21/11/2019 · updated 17/06/2026

要点

CVE-2014-0083 是影响 net-ldap, net-ldap (net-ldap project) 的中危 (CVSS 5.5)漏洞。
未来 30 天内被利用的概率（EPSS）：0.27%，高于 20.1% 的漏洞。
修复：升级到 0.16.2 或更高版本。

Package	Affected versions	Patched versions
net-ldap RubyGems	`< 0.16.2`	`0.16.2`
net-ldap net-ldap_project	`< 0.16.2`	`0.16.2`

Description

The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords.

NVD description

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.

References

nvd.nist.gov/vuln/detail/CVE-2014-0083 · ADVISORY
ruby-ldap/ruby-net-ldap commit b412ca0 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
bugzilla.suse.com/show_bug.cgi · WEB
ruby-ldap/ruby-net-ldap · PACKAGE
security-tracker.debian.org/tracker/CVE-2014-0083 · WEB

net-ldap 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free