Contents

---
gem: net-ldap
cve: 2014-0083
osvdb: 106108
url: https://nvd.nist.gov/vuln/detail/CVE-2014-0083
title:  Net::LDAP for Ruby lib/net/ldap/password.rb SSHA Password Generation Weak Salt
date: 2014-02-13
description: Net::LDAP for Ruby contains a flaw in lib/net/ldap/password.rb. The
  issue is due to the program generating SSHA passwords with a weak salt value
  that is between 0 and 999. This may allow a local attacker to more easily gain
  access to password information.
cvss_v2: 1.9
patched_versions:
  - ">= 0.6.0"

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/net-ldap/CVE-2014-0083.yml