Lucene search
HistoryAug 25, 2011 - 6:55 p.m.
CVE-2011-3268
cve-2011-3268
php
buffer overflow
security vulnerability
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.3 High
AI Score
Confidence
High
0.013 Low
EPSS
Percentile
86.0%
Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different vulnerability than CVE-2011-2483.
Affected configurations
Node
phpphpRange≤5.3.6
ORphpphpMatch1.0
ORphpphpMatch2.0
ORphpphpMatch2.0b10
ORphpphpMatch3.0
ORphpphpMatch3.0.1
ORphpphpMatch3.0.2
ORphpphpMatch3.0.3
ORphpphpMatch3.0.4
ORphpphpMatch3.0.5
ORphpphpMatch3.0.6
ORphpphpMatch3.0.7
ORphpphpMatch3.0.8
ORphpphpMatch3.0.9
ORphpphpMatch3.0.10
ORphpphpMatch3.0.11
ORphpphpMatch3.0.12
ORphpphpMatch3.0.13
ORphpphpMatch3.0.14
ORphpphpMatch3.0.15
ORphpphpMatch3.0.16
ORphpphpMatch3.0.17
ORphpphpMatch3.0.18
ORphpphpMatch4.0beta_4_patch1
ORphpphpMatch4.0beta1
ORphpphpMatch4.0beta2
ORphpphpMatch4.0beta3
ORphpphpMatch4.0beta4
ORphpphpMatch4.0.0
ORphpphpMatch4.0.1
ORphpphpMatch4.0.2
ORphpphpMatch4.0.3
ORphpphpMatch4.0.4
ORphpphpMatch4.0.5
ORphpphpMatch4.0.6
ORphpphpMatch4.0.7
ORphpphpMatch4.1.0
ORphpphpMatch4.1.1
ORphpphpMatch4.1.2
ORphpphpMatch4.2.0
ORphpphpMatch4.2.1
ORphpphpMatch4.2.2
ORphpphpMatch4.2.3
ORphpphpMatch4.3.0
ORphpphpMatch4.3.1
ORphpphpMatch4.3.2
ORphpphpMatch4.3.3
ORphpphpMatch4.3.4
ORphpphpMatch4.3.5
ORphpphpMatch4.3.6
ORphpphpMatch4.3.7
ORphpphpMatch4.3.8
ORphpphpMatch4.3.9
ORphpphpMatch4.3.10
ORphpphpMatch4.3.11
ORphpphpMatch4.4.0
ORphpphpMatch4.4.1
ORphpphpMatch4.4.2
ORphpphpMatch4.4.3
ORphpphpMatch4.4.4
ORphpphpMatch4.4.5
ORphpphpMatch4.4.6
ORphpphpMatch4.4.7
ORphpphpMatch4.4.8
ORphpphpMatch4.4.9
ORphpphpMatch5.0.0
ORphpphpMatch5.0.0beta1
ORphpphpMatch5.0.0beta2
ORphpphpMatch5.0.0beta3
ORphpphpMatch5.0.0beta4
ORphpphpMatch5.0.0rc1
ORphpphpMatch5.0.0rc2
ORphpphpMatch5.0.0rc3
ORphpphpMatch5.0.1
ORphpphpMatch5.0.2
ORphpphpMatch5.0.3
ORphpphpMatch5.0.4
ORphpphpMatch5.0.5
ORphpphpMatch5.1.0
ORphpphpMatch5.1.1
ORphpphpMatch5.1.2
ORphpphpMatch5.1.3
ORphpphpMatch5.1.4
ORphpphpMatch5.1.5
ORphpphpMatch5.1.6
ORphpphpMatch5.2.0
ORphpphpMatch5.2.1
ORphpphpMatch5.2.2
ORphpphpMatch5.2.3
ORphpphpMatch5.2.4
ORphpphpMatch5.2.5
ORphpphpMatch5.2.6
ORphpphpMatch5.2.8
ORphpphpMatch5.2.9
ORphpphpMatch5.2.10
ORphpphpMatch5.2.11
ORphpphpMatch5.2.12
ORphpphpMatch5.2.13
ORphpphpMatch5.2.14
ORphpphpMatch5.3.0
ORphpphpMatch5.3.1
ORphpphpMatch5.3.2
ORphpphpMatch5.3.3
ORphpphpMatch5.3.4
ORphpphpMatch5.3.5
References
lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
osvdb.org/74738
support.apple.com/kb/HT5130
svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/standard/php_crypt_r.c?r1=311300&r2=311390&pathrev=315218
www.mandriva.com/security/advisories?name=MDVSA-2011:165
www.php.net/archive/2011.php#id2011-08-18-1
www.php.net/ChangeLog-5.php#5.3.7
www.securityfocus.com/bid/49241
exchange.xforce.ibmcloud.com/vulnerabilities/69427
Related
prion
prion
Buffer overflow
2011-08-25 18:55:00
Default credentials
2011-08-25 14:22:00
Authentication flaw
2011-08-25 14:22:00
ubuntucve
ubuntucve
cvelist
cvelist
nvd
nvd
nessus
nessus
openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:1137-1)
2014-06-13 00:00:00
openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:1138-1)
2014-06-13 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2011:165)
2011-11-04 00:00:00
openvas
openvas
PHP Multiple Vulnerabilities (Sep 2011) - Windows
2011-09-07 00:00:00
Mandriva Update for php MDVSA-2011:165 (php)
2011-11-08 00:00:00
Mandriva Update for php MDVSA-2011:165 (php)
2011-11-08 00:00:00
securityvulns
securityvulns
PHP multiple security vulnerabilities
2011-10-12 00:00:00
[ MDVSA-2012:071 ] php
2012-05-14 00:00:00
[slackware-security] php (SSA:2011-237-01)
2011-08-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package postgresql12 version 9.0.5-alt1
2011-10-11 00:00:00
Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt5
2011-06-21 00:00:00
Security fix for the ALT Linux 8 package postgresql9.6 version 9.0.5-alt1
2011-10-11 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerability
2011-10-13 00:00:00
PHP Vulnerabilities
2011-10-18 00:00:00
debiancve
debiancve
CVE-2011-2483
2011-08-25 14:22:44
oraclelinux
oraclelinux
postgresql security update
2011-10-17 00:00:00
postgresql84 security update
2011-10-17 00:00:00
postgresql security update
2012-05-21 00:00:00
centos
centos
postgresql84 security update
2011-10-18 19:01:00
postgresql security update
2011-10-18 18:58:11
php53 security update
2011-11-03 03:59:22
osv
osv
postgresql - weak password hashing
2011-11-07 00:00:00
php5 - several
2012-01-31 00:00:00
cve
cve
CVE-2011-2483
2011-08-25 14:22:44
CVE-2011-3189
2011-08-25 14:22:48
redhat
redhat
(RHSA-2011:1377) Moderate: postgresql security update
2011-10-17 00:00:00
(RHSA-2011:1378) Moderate: postgresql84 security update
2011-10-17 00:00:00
(RHSA-2011:1423) Moderate: php53 and php security update
2011-11-02 00:00:00
veracode
veracode
Brute-force Attack
2020-04-10 01:02:59
debian
debian
[SECURITY] [DSA 2340-1] postgresql security update
2011-11-07 19:49:12
[SECURITY] [DSA 2399-2] php5 regression fix
2012-01-31 15:26:47
[SECURITY] [DSA 2399-1] php5 security update
2012-01-31 07:22:58
amazon
amazon
Medium: postgresql
2011-10-31 18:24:00
Important: php
2011-10-11 00:07:00
suse
suse
weak password hashing algorithm in glibc,pam-modules,libxcrypt,pwdutils
2011-08-23 15:21:03
f5
f5
K13519 : Multiple PHP vulnerabilities
2013-09-20 00:00:00
SOL13519 - Multiple PHP vulnerabilities
2012-04-04 00:00:00
freebsd
freebsd
php -- multiple vulnerabilities
2011-08-18 00:00:00
slackware
slackware
[slackware-security] php
2011-08-25 16:35:35
fedora
fedora
[SECURITY] Fedora 14 Update: maniadrive-1.2-32.fc14
2011-09-18 22:59:22
[SECURITY] Fedora 16 Update: maniadrive-1.2-32.fc16
2011-09-09 17:13:35
[SECURITY] Fedora 16 Update: php-5.3.8-1.fc16
2011-09-09 17:13:35
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.3 High
AI Score
Confidence
High
0.013 Low
EPSS
Percentile
86.0%
Related for CVE-2011-3268