crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Addressbook | — | Upgrade macOS to the latest versionApply OS X security update 2012-001 | Aug 28, 2015 | Aug 25, 2011 |
| Apple Osx Php | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Feb 3, 2012 | Aug 25, 2011 |
| Centos_linux | — | Upgrade postgresql-plUpgrade php53-pgsqlUpgrade postgresql-testUpgrade postgresql84-serverUpgrade postgresql84-docsUpgrade postgresql-pythonUpgrade php53-mbstringUpgrade postgresql-tclUpgrade php53-processUpgrade postgresql84-plperlUpgrade postgresql-jdbcUpgrade php53-mysqlUpgrade postgresql84-pythonUpgrade postgresql84-tclUpgrade php53-bcmathUpgrade php53-odbcUpgrade php53-commonUpgrade postgresql84-pltclUpgrade postgresql84-libsUpgrade postgresql84-plpythonUpgrade php53-pdoUpgrade php53-pspellUpgrade postgresql84-testUpgrade php53-gdUpgrade php53-xmlUpgrade php53-cliUpgrade php53-xmlrpcUpgrade postgresql84-contribUpgrade postgresqlUpgrade postgresql84-develUpgrade postgresql-libsUpgrade php53-dbaUpgrade php53-intlUpgrade php53Upgrade postgresql-serverUpgrade postgresql-contribUpgrade php53-snmpUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql84Upgrade php53-soapUpgrade php53-develUpgrade php53-imapUpgrade php53-ldap | Dec 1, 2016 | Aug 25, 2011 |
| Debian | — | Upgrade libxcrypt | Jul 30, 2024 | Aug 25, 2011 |
| F5 Big Ip | — | — | Feb 16, 2017 | Aug 25, 2011 |
| Freebsd | — | Upgrade php5-socketsUpgrade php5 | Dec 10, 2025 | Aug 20, 2011 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-base.Upgrade dev-db/postgresql-server.Upgrade dev-lang/php.Upgrade dev-db/postgresql. | Oct 30, 2017 | Aug 25, 2011 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Aug 25, 2011 |
| Oracle_linux | — | Upgrade php-pgsqlUpgrade php53-xmlrpcUpgrade php-dbaUpgrade php-ldapUpgrade postgresql84-testUpgrade postgresql84-develUpgrade php53-processUpgrade php53-pdoUpgrade postgresql-pythonUpgrade php53-mysqlUpgrade php-pdoUpgrade php53-cliUpgrade postgresql84-pythonUpgrade postgresql-contribUpgrade php53-pspellUpgrade php-intlUpgrade php53-ldapUpgrade php53-pgsqlUpgrade php-odbcUpgrade php-commonUpgrade postgresql-develUpgrade php53-odbcUpgrade php53-snmpUpgrade postgresql84-serverUpgrade php53-bcmathUpgrade postgresql84-docsUpgrade php-soapUpgrade postgresql-tclUpgrade php53-dbaUpgrade php53-commonUpgrade postgresql84-contribUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-plUpgrade php-xmlrpcUpgrade postgresql84-plpythonUpgrade php-cliUpgrade postgresql-pltclUpgrade php-imapUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql84Upgrade php53-xmlUpgrade php53-develUpgrade php-bcmathUpgrade php-tidyUpgrade postgresql-docsUpgrade postgresql84-libsUpgrade php53-imapUpgrade php-mysqlUpgrade postgresql-testUpgrade php-enchantUpgrade postgresql84-pltclUpgrade php-pspellUpgrade php-processUpgrade postgresql-plpythonUpgrade phpUpgrade postgresql84-tclUpgrade php53-intlUpgrade postgresql84-plperlUpgrade php-mbstringUpgrade php-embeddedUpgrade php-snmpUpgrade php53Upgrade php-xmlUpgrade php-gdUpgrade php53-mbstringUpgrade php-ztsUpgrade php53-soapUpgrade php53-gdUpgrade php-recodeUpgrade php-devel | Oct 16, 2024 | Aug 25, 2011 |
| Php | — | Upgrade to PHP version 5.3.7 | Jul 17, 2012 | Aug 25, 2011 |
| Redhat_linux | — | — | Jul 9, 2025 | Jun 20, 2011 |
| Suse | — | Upgrade pam-modules-x86Upgrade pwdutilsUpgrade yast2-core-develUpgrade libxcrypt-x86Upgrade whoisUpgrade yast2-coreUpgrade glibc-profile-x86Upgrade glibc-profile-32bitUpgrade pam-modules-32bitUpgrade glibcUpgrade glibc-infoUpgrade pam-modulesUpgrade pwdutils-plugin-auditUpgrade libxcrypt-develUpgrade nscdUpgrade libxcrypt-32bitUpgrade glibc-locale-32bitUpgrade glibc-devel-32bitUpgrade whois-bash-completionUpgrade glibc-localeUpgrade glibc-locale-x86Upgrade glibc-i18ndataUpgrade glibc-32bitUpgrade glibc-develUpgrade glibc-x86Upgrade glibc-profileUpgrade sysvinit-toolsUpgrade libxcryptUpgrade glibc-html | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade postgresql-8.4Upgrade libapache2-mod-php5Upgrade postgresql-8.3Upgrade php5-cliUpgrade php5-cgiUpgrade php5-common | Nov 8, 2024 | Aug 25, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub