CVE-2026-8721 Crypt::OpenSSL::PKCS12 密码截断漏洞

#!/usr/bin/perl use strict; use warnings; # Note: This is a conceptual PoC to demonstrate the vulnerability trigger. # It requires the vulnerable version of Crypt::OpenSSL::PKCS12. # Simulate a password with an embedded NULL byte # In secure systems, passwords might be binary data or derived keys. my $full_password = "HighEntropySecret" . "\x00" . "RemainingData"; my $pass_len = length($full_password); print "Intended Password Length: $pass_len\n"; print "Intended Password (Hex): " . unpack("H*", $full_password) . "\n"; # In the vulnerable version (<= 1.94), when this password is passed to the module: # 1. Perl passes the buffer and length (ignored). # 2. C code calls strlen() on the buffer. # 3. strlen() stops at \x00. # 4. Effectively, the password becomes just "HighEntropySecret". print "\nVulnerability Impact:\n"; print "Effective Password used by OpenSSL: 'HighEntropySecret'\n"; print "Effective Length: 16\n"; print "Entropy Loss: The bytes after the NULL are discarded.\n"; # This significantly reduces the search space for brute-force attacks.