/ 
Crypt-Passwd-XS-0.506 UNAUTHORIZED RELEASE
Security Advisories (1)
CVE-2012-2143 (2012-05-07)

The crypt_des (aka DES-based crypt) function does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.

Changes for version 0.506 - 2011-03-08

  • Fix handling of undef values passed in for plaintext or salt
  • Improve test output
  • Update DES crypt to convert single character salts to two character salts

Modules

Crypt::Passwd::XS
Full XS implementation of common crypt() algorythms UNAUTHORIZED

Other files