Secunia
Login
|
|
CVE Reference: CVE-2011-3189 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2011-3189 |
|
|
Description: The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass authentication via an arbitrary password, a different vulnerability than CVE-2011-2483. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/69429 SAID Secunia Advisory: SA45678 OSVDB 74726 MLIST http://www.openwall.com/lists/oss-security/2011/08/23/4 CONFIRM http://support.apple.com/kb/HT5130 http://www.php.net/archive/2011.php#id2011-08-23-1 http://www.php.net/ChangeLog-5.php#5.3.8 APPLE http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html |
|
| Return to the previous page. |
