QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2011-2483

Back to search

CVE-2011-2483

Published: Aug 25, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.

VendorProductVersions

n/a

n/a

affected
n/a

References

MDVSA-2011:180
vendor-advisory
x_refsource_MANDRIVA
49241
vdb-entry
x_refsource_BID
MDVSA-2011:165
vendor-advisory
x_refsource_MANDRIVA
DSA-2399
vendor-advisory
x_refsource_DEBIAN
DSA-2340
vendor-advisory
x_refsource_DEBIAN
RHSA-2011:1378
vendor-advisory
x_refsource_REDHAT
APPLE-SA-2012-02-01-1
vendor-advisory
x_refsource_APPLE
SUSE-SA:2011:035
vendor-advisory
x_refsource_SUSE
MDVSA-2011:178
vendor-advisory
x_refsource_MANDRIVA
RHSA-2011:1377
vendor-advisory
x_refsource_REDHAT
RHSA-2011:1423
vendor-advisory
x_refsource_REDHAT
MDVSA-2011:179
vendor-advisory
x_refsource_MANDRIVA
USN-1229-1
vendor-advisory
x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now