CVE-2010-2247

makepasswd 1.10 default settings generate insecure passwords

7.5 HighFix available

makepasswd 1.10 default settings generate insecure passwords

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

1.33%Up 0.3 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

makepasswd 1.10 default settings generate insecure passwords

Record: CVE-2010-2247
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-1188
Updated: 2026-11-02

CVE List No score

makepasswd 1.10 default settings generate insecure passwords

Record: CVE-2010-2247
Updated: 2026-11-02

EUVDEUVD-2010-2259 No score

makepasswd 1.10 default settings generate insecure passwords

Record: EUVD-2010-2259
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g57p-9334-9c99 7.5

makepasswd 1.10 default settings generate insecure passwords

makepasswd 1.10 default settings generate insecure passwords

Record: GHSA-g57p-9334-9c99
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-1188
Updated: 2026-11-02

OSV 7.5

makepasswd 1.10 default settings generate insecure passwords

Record: CVE-2010-2247
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2010-2247 7.5

makepasswd 1.10 default settings generate insecure passwords

Record: DEBIAN-CVE-2010-2247
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVMGASA-2020-0038 No score

Updated makepasswd fix insecure default length of password

Updated makepasswd fix insecure default length of password

By default, makepasswd generates password with a length between 6 to 8 characters (48 to 64bits). This update raise the default to 16 characters (128 bits).

The length can be changed at runtime with the -l option.

Record: MGASA-2020-0038
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`makepasswd` Debian:12	before 1.10-5	1.10-5
`makepasswd` Debian:13	before 1.10-5	1.10-5
`makepasswd` Debian:14	before 1.10-5	1.10-5
`makepasswd` Mageia:7	before 0.5.4-2.1.mga7	0.5.4-2.1.mga7

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-2247 is a high vulnerability (CVSS 7.5) in Makepasswd, published November 6, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.33%, the 71st percentile. Fixed in makepasswd 1.10-5.

References

Show 5 moreShow less