Lucene search
HistoryAug 25, 2011 - 6:55 p.m.
CVE-2011-3268
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
High
EPSS
0.013
Percentile
86.0%
Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different vulnerability than CVE-2011-2483.
Affected configurations
Node
phpphpRange≤5.3.6
ORphpphpMatch1.0
ORphpphpMatch2.0
ORphpphpMatch2.0b10
ORphpphpMatch3.0
ORphpphpMatch3.0.1
ORphpphpMatch3.0.2
ORphpphpMatch3.0.3
ORphpphpMatch3.0.4
ORphpphpMatch3.0.5
ORphpphpMatch3.0.6
ORphpphpMatch3.0.7
ORphpphpMatch3.0.8
ORphpphpMatch3.0.9
ORphpphpMatch3.0.10
ORphpphpMatch3.0.11
ORphpphpMatch3.0.12
ORphpphpMatch3.0.13
ORphpphpMatch3.0.14
ORphpphpMatch3.0.15
ORphpphpMatch3.0.16
ORphpphpMatch3.0.17
ORphpphpMatch3.0.18
ORphpphpMatch4.0beta_4_patch1
ORphpphpMatch4.0beta1
ORphpphpMatch4.0beta2
ORphpphpMatch4.0beta3
ORphpphpMatch4.0beta4
ORphpphpMatch4.0.0
ORphpphpMatch4.0.1
ORphpphpMatch4.0.2
ORphpphpMatch4.0.3
ORphpphpMatch4.0.4
ORphpphpMatch4.0.5
ORphpphpMatch4.0.6
ORphpphpMatch4.0.7
ORphpphpMatch4.1.0
ORphpphpMatch4.1.1
ORphpphpMatch4.1.2
ORphpphpMatch4.2.0
ORphpphpMatch4.2.1
ORphpphpMatch4.2.2
ORphpphpMatch4.2.3
ORphpphpMatch4.3.0
ORphpphpMatch4.3.1
ORphpphpMatch4.3.2
ORphpphpMatch4.3.3
ORphpphpMatch4.3.4
ORphpphpMatch4.3.5
ORphpphpMatch4.3.6
ORphpphpMatch4.3.7
ORphpphpMatch4.3.8
ORphpphpMatch4.3.9
ORphpphpMatch4.3.10
ORphpphpMatch4.3.11
ORphpphpMatch4.4.0
ORphpphpMatch4.4.1
ORphpphpMatch4.4.2
ORphpphpMatch4.4.3
ORphpphpMatch4.4.4
ORphpphpMatch4.4.5
ORphpphpMatch4.4.6
ORphpphpMatch4.4.7
ORphpphpMatch4.4.8
ORphpphpMatch4.4.9
ORphpphpMatch5.0.0
ORphpphpMatch5.0.0beta1
ORphpphpMatch5.0.0beta2
ORphpphpMatch5.0.0beta3
ORphpphpMatch5.0.0beta4
ORphpphpMatch5.0.0rc1
ORphpphpMatch5.0.0rc2
ORphpphpMatch5.0.0rc3
ORphpphpMatch5.0.1
ORphpphpMatch5.0.2
ORphpphpMatch5.0.3
ORphpphpMatch5.0.4
ORphpphpMatch5.0.5
ORphpphpMatch5.1.0
ORphpphpMatch5.1.1
ORphpphpMatch5.1.2
ORphpphpMatch5.1.3
ORphpphpMatch5.1.4
ORphpphpMatch5.1.5
ORphpphpMatch5.1.6
ORphpphpMatch5.2.0
ORphpphpMatch5.2.1
ORphpphpMatch5.2.2
ORphpphpMatch5.2.3
ORphpphpMatch5.2.4
ORphpphpMatch5.2.5
ORphpphpMatch5.2.6
ORphpphpMatch5.2.8
ORphpphpMatch5.2.9
ORphpphpMatch5.2.10
ORphpphpMatch5.2.11
ORphpphpMatch5.2.12
ORphpphpMatch5.2.13
ORphpphpMatch5.2.14
ORphpphpMatch5.3.0
ORphpphpMatch5.3.1
ORphpphpMatch5.3.2
ORphpphpMatch5.3.3
ORphpphpMatch5.3.4
ORphpphpMatch5.3.5
References
lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
osvdb.org/74738
support.apple.com/kb/HT5130
svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/standard/php_crypt_r.c?r1=311300&r2=311390&pathrev=315218
www.mandriva.com/security/advisories?name=MDVSA-2011:165
www.php.net/archive/2011.php#id2011-08-18-1
www.php.net/ChangeLog-5.php#5.3.7
www.securityfocus.com/bid/49241
exchange.xforce.ibmcloud.com/vulnerabilities/69427
Related
prion
prion
Buffer overflow
2011-08-25 18:55:00
Default credentials
2011-08-25 14:22:00
Authentication flaw
2011-08-25 14:22:00
cve
cve
ubuntucve
ubuntucve
cvelist
cvelist
nessus
nessus
openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:1137-1)
2014-06-13 00:00:00
openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:1138-1)
2014-06-13 00:00:00
openSUSE Security Update : yast2-core (openSUSE-SU-2011:0921-2)
2014-06-13 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerability
2011-10-13 00:00:00
PHP Vulnerabilities
2011-10-18 00:00:00
debiancve
debiancve
CVE-2011-2483
2011-08-25 14:22:44
openvas
openvas
Mandriva Update for php-suhosin MDVSA-2011:180 (php-suhosin)
2011-12-23 00:00:00
RedHat Update for postgresql84 RHSA-2011:1378-01
2011-10-21 00:00:00
SuSE Update for glibc,pam-modules,libxcrypt,pwdutils SUSE-SA:2011:035
2011-08-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package postgresql12 version 9.0.5-alt1
2011-10-11 00:00:00
Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt5
2011-06-21 00:00:00
Security fix for the ALT Linux 7 package glibc version 6:2.11.3-alt5
2011-06-21 00:00:00
nvd
nvd
CVE-2011-2483
2011-08-25 14:22:44
CVE-2011-3189
2011-08-25 14:22:48
centos
centos
postgresql84 security update
2011-10-18 19:01:00
postgresql security update
2011-10-18 18:58:11
php53 security update
2011-11-03 03:59:22
suse
suse
weak password hashing algorithm in glibc,pam-modules,libxcrypt,pwdutils
2011-08-23 15:21:03
debian
debian
[SECURITY] [DSA 2340-1] postgresql security update
2011-11-07 19:49:12
[SECURITY] [DSA 2399-2] php5 regression fix
2012-01-31 15:26:47
[SECURITY] [DSA 2399-1] php5 security update
2012-01-31 07:22:58
oraclelinux
oraclelinux
postgresql84 security update
2011-10-17 00:00:00
postgresql security update
2011-10-17 00:00:00
postgresql security update
2012-05-21 00:00:00
redhat
redhat
(RHSA-2011:1378) Moderate: postgresql84 security update
2011-10-17 00:00:00
(RHSA-2011:1377) Moderate: postgresql security update
2011-10-17 00:00:00
(RHSA-2011:1423) Moderate: php53 and php security update
2011-11-02 00:00:00
amazon
amazon
Medium: postgresql
2011-10-31 18:24:00
Important: php
2011-10-11 00:07:00
veracode
veracode
Brute-force Attack
2020-04-10 01:02:59
osv
osv
postgresql - weak password hashing
2011-11-07 00:00:00
php5 - several
2012-01-31 00:00:00
securityvulns
securityvulns
PHP multiple security vulnerabilities
2011-10-12 00:00:00
[slackware-security] php (SSA:2011-237-01)
2011-08-27 00:00:00
PHP multiple security vulnerabilities
2011-08-27 00:00:00
slackware
slackware
[slackware-security] php
2011-08-25 16:35:35
freebsd
freebsd
php -- multiple vulnerabilities
2011-08-18 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: maniadrive-1.2-32.fc16
2011-09-09 17:13:35
[SECURITY] Fedora 14 Update: maniadrive-1.2-32.fc14
2011-09-18 22:59:22
[SECURITY] Fedora 15 Update: php-5.3.8-1.fc15
2011-09-18 23:00:38
f5
f5
SOL13519 - Multiple PHP vulnerabilities
2012-04-04 00:00:00
K13519 : Multiple PHP vulnerabilities
2013-09-20 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2011-10-25 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
High
EPSS
0.013
Percentile
86.0%
Related for NVD:CVE-2011-3268