Lucene search

[email protected]CVE-2012-2143

HistoryJul 05, 2012 - 2:55 p.m.

CVE-2012-2143

2012-07-0514:55:02

CWE-310

[email protected]

web.nvd.nist.gov

345

cve-2012-2143

freebsd

crypt_des

des-based crypt

php

postgresql

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

JSON

The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.

Affected configurations

NVD

Node

postgresqlpostgresqlRange8.3–8.3.19

postgresqlpostgresqlRange8.4–8.4.12

postgresqlpostgresqlRange9.0–9.0.8

postgresqlpostgresqlRange9.1–9.1.4

Node

freebsdfreebsdRange≤9.0

freebsdfreebsdMatch1.0

freebsdfreebsdMatch1.1

freebsdfreebsdMatch1.1.5

freebsdfreebsdMatch1.1.5.1

freebsdfreebsdMatch2.0

freebsdfreebsdMatch2.0.5

freebsdfreebsdMatch2.1

freebsdfreebsdMatch2.1.5

freebsdfreebsdMatch2.1.6

freebsdfreebsdMatch2.1.7

freebsdfreebsdMatch2.2

freebsdfreebsdMatch2.2.1

freebsdfreebsdMatch2.2.2

freebsdfreebsdMatch2.2.5

freebsdfreebsdMatch2.2.6

freebsdfreebsdMatch2.2.7

freebsdfreebsdMatch2.2.8

freebsdfreebsdMatch3.0

freebsdfreebsdMatch3.1

freebsdfreebsdMatch3.2

freebsdfreebsdMatch3.3

freebsdfreebsdMatch3.4

freebsdfreebsdMatch3.5

freebsdfreebsdMatch4.0

freebsdfreebsdMatch4.1

freebsdfreebsdMatch4.1.1

freebsdfreebsdMatch4.2

freebsdfreebsdMatch4.3

freebsdfreebsdMatch4.4

freebsdfreebsdMatch4.5

freebsdfreebsdMatch4.6

freebsdfreebsdMatch4.6.2

freebsdfreebsdMatch4.7

freebsdfreebsdMatch4.8

freebsdfreebsdMatch4.9

freebsdfreebsdMatch4.10

freebsdfreebsdMatch4.11

freebsdfreebsdMatch5.0

freebsdfreebsdMatch5.1

freebsdfreebsdMatch5.2

freebsdfreebsdMatch5.2.1

freebsdfreebsdMatch5.3

freebsdfreebsdMatch5.4

freebsdfreebsdMatch5.5

freebsdfreebsdMatch6.0

freebsdfreebsdMatch6.1

freebsdfreebsdMatch6.2

freebsdfreebsdMatch6.3

freebsdfreebsdMatch6.4

freebsdfreebsdMatch7.0

freebsdfreebsdMatch7.1

freebsdfreebsdMatch7.2

freebsdfreebsdMatch7.3

freebsdfreebsdMatch7.4

freebsdfreebsdMatch8.0

freebsdfreebsdMatch8.1

freebsdfreebsdMatch8.2

freebsdfreebsdMatch8.3

Node

phpphpRange<5.3.14

phpphpRange5.4.0–5.4.4

Node

debiandebian_linuxMatch6.0

CPENameOperatorVersion
postgresql:postgresqlpostgresqllt8.3.19
postgresql:postgresqlpostgresqllt8.4.12
postgresql:postgresqlpostgresqllt9.0.8
postgresql:postgresqlpostgresqllt9.1.4

CPE	Name	Operator	Version
postgresql:postgresql	postgresql	lt	8.3.19
postgresql:postgresql	postgresql	lt	8.4.12
postgresql:postgresql	postgresql	lt	9.0.8
postgresql:postgresql	postgresql	lt	9.1.4