CVE-2008-6792

CVE-2008-6792 describes a weakness in system-tools-backends versions prior to 2.6.0-1ubuntu1.1 in Ubuntu 8.10, specifically within the "Users and Groups" component of GNOME System Tools. This vulnerability stems from the use of 3DES for password hashing, which effectively truncates passwords to eight characters, thereby simplifying brute-force attacks. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to disclosure of sensitive information (C:P). There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) or significant community discussion or media coverage has been identified for this CVE.