Intel

CVE-2002-1657

PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a br… (CVE-2002-1657)

highEPSS 1.3%

Description

PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.

Source: CVELISTV5NVD

Metrics

Severity
high
Priority score
78.37
KEV status
—
Exploit maturity
no public PoC known
XIEM Effective CVSS
7.5
Source: nvd-v3
CVSS v3
7.5
CVSS v4
—
EPSS percentile
68.1 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
EPSS score
1.3 %
Moderate — model estimates 1-10% exploitation likelihood.
Published
2005-04-22 04:00 UTC
CWE
—

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

  • postgresql

    postgresql

References & sources

IDCVE-2002-1657