AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2012-2143

MEDIUM · CVSS 4.3 EPSS 5.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-07-05 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. See the original NVD description below for full technical details.

CVE
CVE-2012-2143
Severity
MEDIUM
CVSS
4.3
EPSS
5.73%

Original NVD Description

The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.