CVE-2006-0591

CVE-2006-0591 describes a weakness in the crypt_gensalt functions of crypt_blowfish 0.4.7 and earlier, affecting BSDI-style extended DES and FreeBSD-style MD5 password hashes. The vulnerability stems from the uneven and non-random distribution of salts, which increases the likelihood of password collisions and simplifies brute-force attacks against stolen password files. This is a low-severity vulnerability with a CVSS score of 1.2, requiring local access and high attack complexity to achieve a partial confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.