Medium severity5.5NVD Advisory· Published Apr 4, 2006· Updated Apr 16, 2026
CVE-2006-1058
CVE-2006-1058
Description
BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.
Affected products
6cpe:2.3:a:avaya:aura_application_enablement_services:4.01:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:avaya:aura_application_enablement_services:4.01:*:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_enablement_services:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_sip_enablement_services:*:*:*:*:*:*:*:*Range: <5.0
- cpe:2.3:a:avaya:message_networking:*:*:*:*:*:*:*:*
- cpe:2.3:a:avaya:messaging_storage_server:*:*:*:*:*:*:*:*Range: >=3.0,<4.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- secunia.com/advisories/19477nvdBroken LinkVendor Advisory
- support.avaya.com/elmodocs2/security/ASA-2007-250.htmnvdThird Party Advisory
- www.securityfocus.com/bid/17330nvdBroken LinkThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/25569nvdThird Party AdvisoryVDB Entry
- bugs.busybox.net/view.phpnvdBroken Link
- secunia.com/advisories/25098nvdBroken Link
- secunia.com/advisories/25848nvdBroken Link
- www.redhat.com/support/errata/RHSA-2007-0244.htmlnvdBroken Link
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9483nvdBroken Link
News mentions
0No linked articles in our index yet.