QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2012-2143

Back to search

CVE-2012-2143

Published: Jul 5, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.

VendorProductVersions

n/a

n/a

affected
n/a

References

SUSE-SU-2012:0840
vendor-advisory
x_refsource_SUSE
FreeBSD-SA-12:02
vendor-advisory
x_refsource_FREEBSD
50718
third-party-advisory
x_refsource_SECUNIA
FEDORA-2012-8924
vendor-advisory
x_refsource_FEDORA
FEDORA-2012-8893
vendor-advisory
x_refsource_FEDORA
DSA-2491
vendor-advisory
x_refsource_DEBIAN
1026995
vdb-entry
x_refsource_SECTRACK
APPLE-SA-2012-09-19-2
vendor-advisory
x_refsource_APPLE
RHSA-2012:1037
vendor-advisory
x_refsource_REDHAT
FEDORA-2012-8915
vendor-advisory
x_refsource_FEDORA
MDVSA-2012:092
vendor-advisory
x_refsource_MANDRIVA
openSUSE-SU-2012:1251
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2012:1288
vendor-advisory
x_refsource_SUSE
49304
third-party-advisory
x_refsource_SECUNIA
openSUSE-SU-2012:1299
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now