CVE-2008-4905 Information

Description

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes which makes it easier for attackers to guess passwords via a brute force attack.

Reference

http://secunia.com/advisories/32272 http://securityreason.com/securityalert/4550 http://www.securityfocus.com/archive/1/497970