CVE-2001-0967: Arkeia

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.

Affected products

• Arkeia Arkeia: version 4.2 only; version 4.2.8-2 only

Published 2001-08-31. Last modified 2026-06-16.