Detections
Analytics
GEN000585 - The system must enforce the correctness of the entire password during authentication - '/etc/shadow'
Information
Some common password hashing schemes only process the first eight characters of a user's password, which reduces the effective strength of the password.Solution
Change the passwords for all accounts using non-compliant password hashes.(This requires GEN000590 is already met.)
See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-5(1)(a), CAT|II, CCI|CCI-000205, Group-ID|V-22302, Rule-ID|SV-37261r2_rule, STIG-ID|GEN000585, Vuln-ID|V-22302
Plugin: Unix
Control ID: d1087312a440d88fb92e78273ec9e62e7e0a08a9d34a991df938c51568cdbff7