CVE-2012-2143
Published Jul 5, 2012
Last updated 8 months ago
Overview
- Description
- The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.
- Source
- secalert@redhat.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-310
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0883209-4A15-421B-A7B9-6EA5C51BA2E4",
"versionEndExcluding": "8.3.19",
"versionStartIncluding": "8.3"
},
{
"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0D785B1-6406-422D-9962-A41EE5724A72",
"versionEndExcluding": "8.4.12",
"versionStartIncluding": "8.4"
},
{
"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82089569-18FD-40EB-9EB4-009223F1A535",
"versionEndExcluding": "9.0.8",
"versionStartIncluding": "9.0"
},
{
"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "193C7F88-26DE-4D6B-ABC9-F79491464143",
"versionEndExcluding": "9.1.4",
"versionStartIncluding": "9.1"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F7B2CC9-2907-49AF-8497-CE60554123F4",
"versionEndIncluding": "9.0"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44EFD22E-02C9-4B80-8934-A9AC8DD858CF"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1B4D4A5-25EB-48FE-BDFD-A274CE802648"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:1.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C11DD743-A21D-48F4-BD55-A8A4FA960F94"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C496B665-70DA-4B98-A5D1-E2935C0CE840"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34797660-41F5-4358-B70F-2A40DE48F182"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B3A2EBB-0359-49A7-B7F9-56EE6FD85D29"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4054D69F-596F-4EB4-BE9A-E2478343F55A"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA26ABBE-9973-45FA-9E9B-82170B751219"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF4F7002-A525-4A66-BE8B-E50ABBF144B2"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "183667CA-6DF1-4BFB-AE32-9ABF55B7283A"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1156954-25AD-45BE-AE49-9705ECD5BDA2"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBDDEC3F-52EB-4E1E-84C4-B472600059EC"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "314BA420-4C74-4060-8ACE-D7A7C041CF2B"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EAD7613-A5B3-4621-B981-290C7C6B8BA0"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8ED84E66-CFD9-4DF8-9679-13457D340D54"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE38C50A-81FE-412E-9717-3672FAE6A6F4"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "263F3734-7076-4EA8-B4C0-F37CFC4E979E"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0419DD66-FF66-48BC-AD3B-F6AFD0551E36"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B982342C-1981-4C55-8044-AFE4D87623DF"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47E02BE6-4800-4940-B269-385B66AC5077"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0A585A1-FF82-418F-90F8-072458DB7816"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE31DFF8-06AB-489D-A0C5-509C090283B5"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF49BF03-C25E-4737-84D5-892895C86C58"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2019E0E-426B-43AF-8904-1B811AE171E8"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55C5FC1A-1253-4390-A4FC-573BB14EA937"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44308D13-D935-4FF8-AB52-F0E115ED1AD2"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00EAEA17-033A-4A50-8E39-D61154876D2F"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FFD9D1C-A459-47AD-BC62-15631417A32F"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "582B9BF3-5BF1-44A3-A580-62F2D44FDD34"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD7C441E-444B-4DF5-8491-86805C70FB99"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:5.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAD73CDB-94C5-4DBF-8B4C-DD3E4E399445"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7752D43D-64AF-474F-BFBB-2625A29C1B88"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4416CBA-76B9-4051-B015-F1BE89517309"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9118B602-3FB6-4701-AC09-763DD48334BA"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F702C46F-CA02-4FA2-B7D6-C61C2C095679"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4F7F02A-C845-40BF-8490-510A070000F3"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47E0A416-733A-4616-AE08-150D67FCEA70"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "803EFA9F-B7CB-4511-B1C1-381170CA9A23"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F948527C-A01E-4315-80B6-47FACE18A34F"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F25FB59-1E4F-4420-8482-8007FF5E2411"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C94B745-BD27-423D-BBB6-A821CD9BC1C4"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CF1F9EF-01AF-4708-AE02-765360AF3D66"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9899C87E-2C09-46AE-BC24-1ACF012784CA"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD5ECA1A-D9B4-4ED7-95EC-684E7AA2B765"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:8.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30C501A1-FE2D-41E7-A5DB-C61D8701B9B4"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4771E65B-4C4C-4299-B6DB-E7B35233C63C",
"versionEndExcluding": "5.3.14"
},
{
"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64C21940-9DA6-4922-B43E-4EA79FD918C1",
"versionEndExcluding": "5.4.4",
"versionStartIncluding": "5.4.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "036E8A89-7A16-411F-9D31-676313BB7244"
}
],
"operator": "OR"
}
]
}
]