What is CVE-2012-3287?

CVE-2012-3287 is a vulnerability in Poul-Henning Kamp Md5crypt, classified under Cryptographic Issues. Published 2012-06-13.

Is CVE-2012-3287 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Poul-Henning Kamp Md5crypt

CVE-2012-3287

Poul-Henning Kamp md5crypt has insufficient algorithmic complexity and a consequently short runtime, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack, as demonstrated by an attack using GPU hardware.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.014 (69.3th percentile) — read the EPSS interpretation.

Affected products

Poul-henning_kamp Md5crypt
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

Public proof-of-concept exploits

Live-Hack-CVE/CVE-2012-3287

References

cve@mitre.org (Vendor Advisory)
cve@mitre.org

Frequently asked questions

What is CVE-2012-3287?: CVE-2012-3287 is a vulnerability in Poul-Henning Kamp Md5crypt, classified under Cryptographic Issues. Published 2012-06-13.
Is CVE-2012-3287 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.