← Database

CVE-2010-2967

HIGH CVSS: 7.8 Published: 2010-08-05 Modified: 2026-06-16

Description

The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.

Affected Platforms

Windriver Vxworks

Weakness Type

CWE-310

References