/ 
Crypt-Passwd-XS-0.501
River stage one • 4 direct dependents • 4 total dependents
Security Advisories (1)
CVE-2012-2143 (2012-05-07)

The crypt_des (aka DES-based crypt) function does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.

Changes for version 0.501 - 2010-11-16

  • Remove useless include of crypt.h in des.c
  • Remove usage of mempcpy() from sha256crypt.c and sha512crypt.c
  • Remove usage of __stpncpy from sha512crypt.c
  • Update Makefile.PL
  • Fix byte order detection
  • Fix typo in POD example
  • Fix test messages is 05_combined.t

Modules

Crypt::Passwd::XS
Full XS implementation of common crypt() algorythms

Other files