CVE-2011-3189
MEDIUM severity · CVSS 4.3 · CWE-310
4.3CVSS MEDIUM
Summary
The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass authentication via an arbitrary password, a different vulnerability than CVE-2011-2483.
Impact & exploitability
Attack vectorNetwork
Attack complexity—
Privileges required—
User interaction—
Confidentiality impact—
Integrity impactNone
Availability impactNone
Exploit probability (EPSS)4%
AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://secunia.com/advisories/45678Advisory
- http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
- http://osvdb.org/74726
- http://support.apple.com/kb/HT5130
- http://www.openwall.com/lists/oss-security/2011/08/23/4
- http://www.php.net/ChangeLog-5.php#5.3.8
- http://www.php.net/archive/2011.php#id2011-08-23-1
- https://bugs.gentoo.org/show_bug.cgi?id=380261