Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PostgreSQL Cryptographic Issues Vulnerability - CVE-2012-2143 - Vulnerability Database
PostgreSQL

PostgreSQL Cryptographic Issues Vulnerability - CVE-2012-2143

Medium
Reference: CVE-2012-2143
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-2143
Title: PostgreSQL Cryptographic Issues Vulnerability
Overview:

The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2 as used in PHP PostgreSQL and other products does not process the complete cleartext password if this password contains a 0x80 character which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password as demonstrated by a Unicode password.