Description

PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.

Remediation

References

CVE-2002-1657

Related Vulnerabilities

WordPress Plugin WP JS Cross-Site Scripting (2.0.6)

phpMyFAQ Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2005-3046)

WordPress Plugin YARPP-Yet Another Related Posts Cross-Site Scripting (5.30.2)

PrestaShop Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-4792)

WordPress Plugin FileBird-WordPress Media Library Folders & File Manager SQL Injection (4.7.3)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2002-1657