PT-2011-5225 · Suse+3 · Suse Linux Enterprise+4
Publicado
1970-01-01
·
Atualizado
2024-06-15
·
CVE-2011-2483
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
SUSE Linux Enterprise (affected versions not specified)
crypt blowfish versions prior to 1.1
PHP versions prior to 5.3.7
PostgreSQL versions prior to 8.4.9
Description
The issue is related to the handling of 8-bit characters in password hashes, making it easier for attackers to determine cleartext passwords. The vulnerability can be exploited remotely.
Recommendations
For SUSE Linux Enterprise, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For crypt blowfish, update to version 1.1 or later.
For PHP, update to version 5.3.7 or later.
For PostgreSQL, update to version 8.4.9 or later.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Php
Postgresql
Red Hat
Suse Linux Enterprise
Suse