topic Getting rid of MD5 hashed passwords (local users, expert) in Spark Firewall (SMB)

Getting rid of MD5 hashed passwords (local users, expert)

Bärbel — Tue, 04 Jun 2024 07:48:42 GMT

I see that even R81.10.10 uses MD5 hashes to store local users (in /etc/shadow) and for the expert password (in /pfrm2.0/config1/expert_pass_).

Is there a way to have a state-of-the-art hash algoritm?

I stumbled across this (again) while changing passwords to protect against CVE-2024-24919.

Amir_Erman — Tue, 04 Jun 2024 08:00:17 GMT

Thanks for bringing this up

I agree this is an item to be fixed

This is already in working; Planned to be resolved in the coming R81.10.15

Please stay tune on our mailing list, soon we start the EA program

Amir