From 4d156302b0c835e93fe77c49a4a18236f2f6fb59 Mon Sep 17 00:00:00 2001 From: Xin LI Date: Tue, 23 Aug 2011 00:58:34 +0000 Subject: [PATCH] Mark PHP5 < 5.3.7_2 as vulnerable to PHP bug #55439: crypt() returns only the salt for MD5. --- security/vuxml/vuln.xml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 65027f72d7f6..34d475cdac75 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,33 @@ Note: Please add new entries to the beginning of this file. --> + + php -- crypt() returns only the salt for MD5 + + + php5 + 5.3.7_2 + + + + +

PHP development team reports:

+
+

If crypt() is executed with MD5 salts, the return + value conists of the salt only. DES and BLOWFISH + salts work as expected.

+
+ + + + https://bugs.php.net/bug.php?id=55439 + + + 2011-08-17 + 2011-08-23 + + + php -- multiple vulnerabilities