CVE-2008-3188

CVE-2008-3188 describes a cryptographic weakness in libxcrypt within SUSE openSUSE 11.0, where the system incorrectly uses the weaker DES algorithm instead of the configured MD5 algorithm for password hashing. This flaw significantly lowers the security of hashed passwords, making them more susceptible to brute-force attacks. With a CVSS score of 7.5 (HIGH), the vulnerability is remotely exploitable with low attack complexity, allowing unauthorized access to sensitive information. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this decade-old vulnerability.