CVE-2006-0591
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based...
1.2 Low
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.
Exploit likelihood
0.39%Down 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.
- Record
CVE-2006-0591- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:P/I:N/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE ListNo score
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.
- Record
CVE-2006-0591- Updated
- 2026-11-02
EUVDEUVD-2006-0598No score
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.
- Record
EUVD-2006-0598- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-prwf-cxjx-w992No score
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based...
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.
- Record
GHSA-prwf-cxjx-w992- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rh-postgresqlRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
Show 86 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-postgresql-tclRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresqlRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresqlRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:7.3.15-2 | 0:7.3.15-2 |
postgresqlRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0591 is a low vulnerability (CVSS 1.2) in Solar Designer Crypt Blowfish, published February 8, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.
References
securityfocus.com/archive/1/424260/100/0/threaded
secunia.com/advisories/20653
exchange.xforce.ibmcloud.com/vulnerabilities/24590
redhat.com/support/errata/RHSA-2006-0526.html
Show 26 moreShow less
osvdb.org/23005
vupen.com/english/advisories/2006/0477
support.avaya.com/elmodocs2/security/ASA-2006-113.htm
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11502
cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/glibc/crypt_blowfish/crypt_gensalt.c?only_with_tag=CRYPT_BLOWFISH_1_0
nvd.nist.gov/vuln/detail/CVE-2006-0591
github.com/advisories/GHSA-prwf-cxjx-w992
access.redhat.com/errata/RHSA-2006:0526
postgresql.org/docs/techdocs.52
bugzilla.redhat.com/show_bug.cgi?id=180536
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0526.json
cve.org/CVERecord?id=CVE-2006-0591