crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Addressbook | — | Upgrade macOS to the latest versionApply OS X security update 2012-001 | Aug 28, 2015 | Aug 25, 2011 |
| Apple Osx Php | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Feb 3, 2012 | Aug 25, 2011 |
| Centos_linux | — | Upgrade php53-imapUpgrade postgresql-libsUpgrade php53-intlUpgrade php53-snmpUpgrade php53-pspellUpgrade postgresql84Upgrade postgresql-docsUpgrade php53-xmlrpcUpgrade php53-soapUpgrade postgresql-contribUpgrade postgresqlUpgrade php53-develUpgrade php53-cliUpgrade php53Upgrade php53-xmlUpgrade postgresql-serverUpgrade postgresql84-develUpgrade postgresql84-contribUpgrade php53-dbaUpgrade php53-gdUpgrade postgresql-develUpgrade postgresql84-testUpgrade postgresql-jdbcUpgrade php53-pgsqlUpgrade postgresql84-plpythonUpgrade postgresql84-docsUpgrade php53-ldapUpgrade postgresql-plUpgrade postgresql84-serverUpgrade postgresql-testUpgrade php53-odbcUpgrade postgresql-tclUpgrade php53-bcmathUpgrade postgresql84-pythonUpgrade php53-commonUpgrade postgresql-pythonUpgrade postgresql84-pltclUpgrade php53-mbstringUpgrade php53-processUpgrade postgresql84-plperlUpgrade php53-pdoUpgrade php53-mysqlUpgrade postgresql84-tclUpgrade postgresql84-libs | Dec 1, 2016 | Aug 25, 2011 |
| Debian | — | Upgrade libxcrypt | Jul 30, 2024 | Aug 25, 2011 |
| F5 Big Ip | — | — | Feb 16, 2017 | Aug 25, 2011 |
| Freebsd | — | Upgrade php5-socketsUpgrade php5 | Dec 10, 2025 | Aug 20, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php.Upgrade dev-db/postgresql.Upgrade dev-db/postgresql-server.Upgrade dev-db/postgresql-base. | Oct 30, 2017 | Aug 25, 2011 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Aug 25, 2011 |
| Oracle_linux | — | Upgrade php-processUpgrade postgresql-pltclUpgrade php-ztsUpgrade php-pspellUpgrade postgresql-plpythonUpgrade postgresql-testUpgrade php53Upgrade postgresql84-plperlUpgrade php-cliUpgrade postgresql84-plpythonUpgrade php53-mbstringUpgrade php-gdUpgrade php-xmlUpgrade php-enchantUpgrade php-imapUpgrade php-mbstringUpgrade php-recodeUpgrade php53-commonUpgrade php53-soapUpgrade php-mysqlUpgrade postgresql-plUpgrade postgresql-libsUpgrade postgresql84Upgrade postgresql-serverUpgrade phpUpgrade php-bcmathUpgrade php-embeddedUpgrade php53-develUpgrade postgresql84-contribUpgrade php53-gdUpgrade postgresql-plperlUpgrade php-develUpgrade postgresqlUpgrade php53-imapUpgrade php53-xmlUpgrade postgresql-docsUpgrade postgresql84-pltclUpgrade php-xmlrpcUpgrade postgresql84-tclUpgrade php-snmpUpgrade php-tidyUpgrade postgresql84-libsUpgrade php53-intlUpgrade php53-pgsqlUpgrade php-intlUpgrade postgresql84-pythonUpgrade postgresql-develUpgrade postgresql84-testUpgrade php53-processUpgrade php53-pdoUpgrade php53-ldapUpgrade postgresql84-serverUpgrade php53-odbcUpgrade php53-xmlrpcUpgrade postgresql-contribUpgrade postgresql84-develUpgrade php53-mysqlUpgrade php-ldapUpgrade postgresql-pythonUpgrade php-commonUpgrade php-dbaUpgrade php-pdoUpgrade php-soapUpgrade php53-dbaUpgrade php53-cliUpgrade postgresql-tclUpgrade php53-bcmathUpgrade php-odbcUpgrade postgresql84-docsUpgrade php53-pspellUpgrade php-pgsqlUpgrade php53-snmp | Oct 16, 2024 | Aug 25, 2011 |
| Php | — | Upgrade to PHP version 5.3.7 | Jul 17, 2012 | Aug 25, 2011 |
| Redhat_linux | — | — | Jul 9, 2025 | Jun 20, 2011 |
| Suse | — | Upgrade glibc-localeUpgrade glibc-32bitUpgrade sysvinit-toolsUpgrade libxcryptUpgrade whois-bash-completionUpgrade glibc-profileUpgrade glibc-htmlUpgrade glibc-x86Upgrade glibc-locale-x86Upgrade glibc-i18ndataUpgrade glibc-develUpgrade glibc-devel-32bitUpgrade glibcUpgrade pwdutils-plugin-auditUpgrade nscdUpgrade libxcrypt-32bitUpgrade pam-modules-32bitUpgrade pwdutilsUpgrade whoisUpgrade libxcrypt-x86Upgrade yast2-coreUpgrade yast2-core-develUpgrade pam-modulesUpgrade libxcrypt-develUpgrade glibc-profile-32bitUpgrade pam-modules-x86Upgrade glibc-profile-x86Upgrade glibc-infoUpgrade glibc-locale-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5-commonUpgrade postgresql-8.3Upgrade php5-cgiUpgrade php5-cliUpgrade postgresql-8.4 | Nov 8, 2024 | Aug 25, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub