CVE-2012-2143

{"id": "CVE-2012-2143", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-07-05T14:55:02.183", "references": [{"url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=aab49e934de1fff046e659cbec46e3d053b41c34", "tags": ["Broken Link", "Patch"], "source": "secalert@redhat.com"}, {"url": "http://git.postgresql.org/gitweb/?p=postgresql.git&a=commit&h=932ded2ed51e8333852e370c7a6dad75d9f236f9", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082258.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082292.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082294.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00102.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-updates/2012-10/msg00013.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-updates/2012-10/msg00024.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2012-1037.html", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/49304", "tags": ["Broken Link", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/50718", "tags": ["Broken Link", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://security.freebsd.org/advisories/FreeBSD-SA-12:02.crypt.asc", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://support.apple.com/kb/HT5501", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2012/dsa-2491", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:092", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://www.postgresql.org/docs/8.3/static/release-8-3-19.html", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.postgresql.org/docs/8.4/static/release-8-4-12.html", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.postgresql.org/docs/9.0/static/release-9-0-8.html", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.postgresql.org/docs/9.1/static/release-9-1-4.html", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.postgresql.org/support/security/", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.securitytracker.com/id?1026995", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=816956", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-310"}]}], "descriptions": [{"lang": "en", "value": "The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password."}, {"lang": "es", "value": "La funci\u00f3n crypt_des (tambi\u00e9n conocido como crypt basado en DES), en FreeBSD v9.0-RELEASE-p2, tal y como se utiliza en PHP, PostgreSQL y otros productos, no procesa las contrase\u00f1as en claro si la contrase\u00f1a contiene un car\u00e1cter de 0x80, lo que hace m\u00e1s f\u00e1cil para los atacantes dependientes del contexto a la hora de obtener acceso a trav\u00e9s de un intento de autenticaci\u00f3n con una subcadena inicial con la contrase\u00f1a, tal y como se demuestra con una contrase\u00f1a Unicode."}], "lastModified": "2024-03-14T19:59:00.810", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0883209-4A15-421B-A7B9-6EA5C51BA2E4", "versionEndExcluding": "8.3.19", "versionStartIncluding": "8.3"}, {"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0D785B1-6406-422D-9962-A41EE5724A72", "versionEndExcluding": "8.4.12", "versionStartIncluding": "8.4"}, {"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82089569-18FD-40EB-9EB4-009223F1A535", "versionEndExcluding": "9.0.8", "versionStartIncluding": "9.0"}, {"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "193C7F88-26DE-4D6B-ABC9-F79491464143", "versionEndExcluding": "9.1.4", "versionStartIncluding": "9.1"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F7B2CC9-2907-49AF-8497-CE60554123F4", "versionEndIncluding": "9.0"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44EFD22E-02C9-4B80-8934-A9AC8DD858CF"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1B4D4A5-25EB-48FE-BDFD-A274CE802648"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:1.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C11DD743-A21D-48F4-BD55-A8A4FA960F94"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C496B665-70DA-4B98-A5D1-E2935C0CE840"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34797660-41F5-4358-B70F-2A40DE48F182"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B3A2EBB-0359-49A7-B7F9-56EE6FD85D29"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4054D69F-596F-4EB4-BE9A-E2478343F55A"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA26ABBE-9973-45FA-9E9B-82170B751219"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.1.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF4F7002-A525-4A66-BE8B-E50ABBF144B2"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "183667CA-6DF1-4BFB-AE32-9ABF55B7283A"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1156954-25AD-45BE-AE49-9705ECD5BDA2"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBDDEC3F-52EB-4E1E-84C4-B472600059EC"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "314BA420-4C74-4060-8ACE-D7A7C041CF2B"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EAD7613-A5B3-4621-B981-290C7C6B8BA0"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8ED84E66-CFD9-4DF8-9679-13457D340D54"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE38C50A-81FE-412E-9717-3672FAE6A6F4"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "263F3734-7076-4EA8-B4C0-F37CFC4E979E"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0419DD66-FF66-48BC-AD3B-F6AFD0551E36"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B982342C-1981-4C55-8044-AFE4D87623DF"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47E02BE6-4800-4940-B269-385B66AC5077"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0A585A1-FF82-418F-90F8-072458DB7816"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE31DFF8-06AB-489D-A0C5-509C090283B5"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF49BF03-C25E-4737-84D5-892895C86C58"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2019E0E-426B-43AF-8904-1B811AE171E8"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55C5FC1A-1253-4390-A4FC-573BB14EA937"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44308D13-D935-4FF8-AB52-F0E115ED1AD2"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B86C77AB-B8FF-4376-9B4E-C88417396F3D"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "441BE3A0-20F4-4972-B279-19B3DB5FA14D"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00EAEA17-033A-4A50-8E39-D61154876D2F"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FFD9D1C-A459-47AD-BC62-15631417A32F"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "582B9BF3-5BF1-44A3-A580-62F2D44FDD34"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD7C441E-444B-4DF5-8491-86805C70FB99"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:5.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BAD73CDB-94C5-4DBF-8B4C-DD3E4E399445"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7752D43D-64AF-474F-BFBB-2625A29C1B88"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4416CBA-76B9-4051-B015-F1BE89517309"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9118B602-3FB6-4701-AC09-763DD48334BA"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F702C46F-CA02-4FA2-B7D6-C61C2C095679"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4F7F02A-C845-40BF-8490-510A070000F3"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47E0A416-733A-4616-AE08-150D67FCEA70"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "803EFA9F-B7CB-4511-B1C1-381170CA9A23"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F948527C-A01E-4315-80B6-47FACE18A34F"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F25FB59-1E4F-4420-8482-8007FF5E2411"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C94B745-BD27-423D-BBB6-A821CD9BC1C4"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CF1F9EF-01AF-4708-AE02-765360AF3D66"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9899C87E-2C09-46AE-BC24-1ACF012784CA"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD5ECA1A-D9B4-4ED7-95EC-684E7AA2B765"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:8.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30C501A1-FE2D-41E7-A5DB-C61D8701B9B4"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4771E65B-4C4C-4299-B6DB-E7B35233C63C", "versionEndExcluding": "5.3.14"}, {"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64C21940-9DA6-4922-B43E-4EA79FD918C1", "versionEndExcluding": "5.4.4", "versionStartIncluding": "5.4.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "036E8A89-7A16-411F-9D31-676313BB7244"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}