VulnerabilityModified
CVE-2011-3189
The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass authentication via an arbitrary password, a different vulnerability than…
MEDIUM 4.3EPSS 4.21%
Does this matter?
Lower severity and a low EPSS score (4.21%). Track it; it rarely justifies an emergency change on its own.
Description
The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass authentication via an arbitrary password, a different vulnerability than CVE-2011-2483.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
- EPSS
- 4.21% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-310
- Affected
- php/php
- Source
- secalert@redhat.com
References
- http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
- http://osvdb.org/74726
- http://secunia.com/advisories/45678Vendor Advisory
- http://support.apple.com/kb/HT5130
- http://www.openwall.com/lists/oss-security/2011/08/23/4
- http://www.php.net/ChangeLog-5.php#5.3.8
- http://www.php.net/archive/2011.php#id2011-08-23-1
- https://bugs.gentoo.org/show_bug.cgi?id=380261
- https://bugs.php.net/bug.php?id=55439Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69429
- http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
- http://osvdb.org/74726
- http://secunia.com/advisories/45678Vendor Advisory
- http://support.apple.com/kb/HT5130
- http://www.openwall.com/lists/oss-security/2011/08/23/4
- http://www.php.net/ChangeLog-5.php#5.3.8
- http://www.php.net/archive/2011.php#id2011-08-23-1
- https://bugs.gentoo.org/show_bug.cgi?id=380261
- https://bugs.php.net/bug.php?id=55439Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69429
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.