Debian/busybox: medium 5.5

BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.

Action: Upgrade busybox to 1:1.1.3-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-1058
• https://security-tracker.debian.org/tracker/CVE-2006-1058

published 2006-04-04T10:04:00Z · modified 2026-10-23T00:01:07.500526157Z · JSON