Description

crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.

Remediation

References

CVE-2011-2483

Related Vulnerabilities

WordPress Plugin FG PrestaShop to WooCommerce Cross-Site Scripting (3.19.1)

Envoy Proxy Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-27492)

WordPress Plugin WordPress Download Manager Cross-Site Scripting (2.9.93)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12646)

WordPress Plugin LiveGrounds 'uid' Parameter Cross-Site Scripting (0.42)

Severity

Medium

Classification

CVE-2011-2483

Tags

Missing Update Known Vulnerabilities