Security Advisories (1)
CVE-2012-2143 (2012-05-07)

The crypt_des (aka DES-based crypt) function does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.

Changes for version 0.4 - 2010-11-09

  • Initial public release

Modules

Full XS implementation of common crypt() algorythms