CVE-2012-2143

The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete…

published July 5, 2012

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05734 · 93.0th percentile
Published
2012-07-05T14:00Z
EPSS history
Timeline
  • 05 JUL 14:00Z
    The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete…
    cvelistv5