gpw generates shorter passwords than required
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2011-4931 | third party advisory |
https://access.redhat.com/security/cve/cve-2011-4931 | third party advisory broken link |
http://www.openwall.com/lists/oss-security/2012/01/17/13 | third party advisory mailing list |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651510 | mailing list third party advisory |