The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Jul 5, 2012 |
| Apple Osx Note | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Aug 28, 2015 | Jul 5, 2012 |
| Apple Osx Php | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Sep 27, 2012 | Jul 5, 2012 |
| Centos_linux | — | Upgrade postgresql84-testUpgrade php-soapUpgrade postgresql84-develUpgrade postgresql84-tclUpgrade php53-cliUpgrade postgresql-pythonUpgrade php-intlUpgrade php-tidyUpgrade php53-odbcUpgrade php53-ldapUpgrade php53-snmpUpgrade php-ldapUpgrade postgresql84-docsUpgrade php-imapUpgrade phpUpgrade php53-pgsqlUpgrade php53-pdoUpgrade php53-processUpgrade php-odbcUpgrade postgresql-tclUpgrade postgresql-plUpgrade php-commonUpgrade php-pgsqlUpgrade php53-dbaUpgrade postgresql-contribUpgrade php-ztsUpgrade php53-gdUpgrade php53-bcmathUpgrade php-bcmathUpgrade php53-pspellUpgrade postgresql-develUpgrade postgresql84-pltclUpgrade php53-imapUpgrade php-pdoUpgrade php53-commonUpgrade php-recodeUpgrade php-mbstringUpgrade php53-xmlrpcUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql84-contribUpgrade postgresql84-pythonUpgrade php-xmlUpgrade php53-develUpgrade php53-mysqlUpgrade postgresql-pltclUpgrade postgresql84-plperlUpgrade postgresql84-serverUpgrade postgresql84-libsUpgrade postgresql-libsUpgrade php53-mbstringUpgrade php-processUpgrade postgresql84Upgrade php-xmlrpcUpgrade php-dbaUpgrade php53-xmlUpgrade php-cliUpgrade php-mysqlUpgrade php-develUpgrade php53Upgrade php-pspellUpgrade php-enchantUpgrade postgresql-docsUpgrade php-gdUpgrade postgresql-plpythonUpgrade php-snmpUpgrade postgresqlUpgrade php53-soapUpgrade php-embeddedUpgrade php53-intlUpgrade postgresql84-plpython | Dec 1, 2016 | Jul 5, 2012 |
| Freebsd | — | Upgrade FreeBSDUpgrade postgresql-server | Dec 10, 2025 | Jun 27, 2012 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server.Upgrade dev-lang/php. | Oct 30, 2017 | Jul 5, 2012 |
| Oracle_linux | — | Upgrade postgresql-serverUpgrade php-ldapUpgrade php-pdoUpgrade php-mysqlUpgrade postgresql84-testUpgrade php53-odbcUpgrade php-odbcUpgrade php-commonUpgrade php53-soapUpgrade php53-commonUpgrade php-snmpUpgrade php53-ldapUpgrade php-bcmathUpgrade php-cliUpgrade postgresql84-serverUpgrade php53-develUpgrade postgresql-tclUpgrade php53-mbstringUpgrade php-develUpgrade php53-pdoUpgrade php-xmlUpgrade postgresqlUpgrade postgresql84-docsUpgrade postgresql-testUpgrade postgresql-pythonUpgrade php53-gdUpgrade php53-imapUpgrade postgresql-libsUpgrade php53-processUpgrade php-recodeUpgrade postgresql84-pythonUpgrade postgresql-plUpgrade php-xmlrpcUpgrade postgresql84-plperlUpgrade postgresql84-plpythonUpgrade php-ztsUpgrade php-embeddedUpgrade postgresql84-pltclUpgrade php53-bcmathUpgrade postgresql-plpythonUpgrade php-intlUpgrade php53-xmlUpgrade postgresql84-contribUpgrade php-tidyUpgrade postgresql-pltclUpgrade php-processUpgrade postgresql-plperlUpgrade php53-mysqlUpgrade php53-pspellUpgrade php-dbaUpgrade postgresql84Upgrade php53Upgrade php-mbstringUpgrade php-pgsqlUpgrade postgresql84-tclUpgrade postgresql-develUpgrade php53-intlUpgrade php-pspellUpgrade postgresql-contribUpgrade php53-xmlrpcUpgrade php-soapUpgrade php-enchantUpgrade php53-snmpUpgrade php53-dbaUpgrade postgresql-docsUpgrade php-gdUpgrade postgresql84-libsUpgrade php53-pgsqlUpgrade php53-cliUpgrade php-imapUpgrade postgresql84-develUpgrade php | Oct 16, 2024 | Jul 5, 2012 |
| Php | — | Upgrade to PHP version 5.4.4Upgrade to PHP version 5.3.14 | Jul 17, 2012 | Jul 5, 2012 |
| Postgres | — | Upgrade to PostgreSQL version 8.3.19Upgrade to PostgreSQL version 8.4.12Upgrade to PostgreSQL version 9.1.4Upgrade to PostgreSQL version 9.0.8 | Feb 24, 2013 | Jul 5, 2012 |
| Suse | — | Upgrade postgresql94-serverUpgrade postgresql10-serverUpgrade postgresql10-plpythonUpgrade php53-curlUpgrade php53-bcmathUpgrade php53-fileinfoUpgrade php53-odbcUpgrade php53-pcntlUpgrade php53-sysvshmUpgrade php53-shmopUpgrade postgresql96-serverUpgrade php53-calendarUpgrade postgresql10Upgrade php53-readlineUpgrade php53-iconvUpgrade postgresql96Upgrade libecpg6Upgrade php53-zipUpgrade postgresql10-plperlUpgrade php53Upgrade postgresql94Upgrade postgresql-docsUpgrade php53-zlibUpgrade php53-mbstringUpgrade php53-suhosinUpgrade postgresqlUpgrade php53-sysvmsgUpgrade libpq5Upgrade php53-gdUpgrade php53-gettextUpgrade postgresql93-serverUpgrade php53-sqliteUpgrade php53-xmlwriterUpgrade php53-soapUpgrade php53-pdoUpgrade php53-ftpUpgrade php53-mcryptUpgrade php53-socketsUpgrade postgresql93-docsUpgrade php53-wddxUpgrade php53-sysvsemUpgrade php53-tidyUpgrade php53-xmlreaderUpgrade php53-imapUpgrade php53-pgsqlUpgrade php53-posixUpgrade php53-opensslUpgrade postgresql94-develUpgrade php53-fastcgiUpgrade postgresql10-docsUpgrade postgresql93-develUpgrade postgresql10-pltclUpgrade php53-dbaUpgrade postgresql96-docsUpgrade postgresql-serverUpgrade php53-bz2Upgrade postgresql-develUpgrade php53-exifUpgrade php53-ldapUpgrade postgresql94-docsUpgrade php53-intlUpgrade postgresql93-contribUpgrade postgresql94-contribUpgrade postgresql-contribUpgrade php53-pearUpgrade php53-develUpgrade php53-mysqlUpgrade php53-jsonUpgrade postgresql96-contribUpgrade php53-xmlrpcUpgrade libpq5-32bitUpgrade apache2-mod_php53Upgrade php53-snmpUpgrade postgresql93Upgrade postgresql10-contribUpgrade postgresql10-develUpgrade php53-gmpUpgrade php53-xslUpgrade php53-tokenizerUpgrade php53-ctypeUpgrade php53-domUpgrade php53-pspellUpgrade postgresql96-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5Upgrade postgresql-9.1Upgrade postgresql-8.3Upgrade postgresql-8.4 | Nov 8, 2024 | Jul 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub