blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2011-2483

MEDIUM 5.0 CVSS 2.0
Published
August 25, 2011
Last modified
June 16, 2026
NVD status
Modified
Reported by
secalert@redhat.com
Weakness
CWE-310
CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.

Affected products and versions

  • PHP — Before 5.3.7

References

  • freshmeat.net http://freshmeat.net/projects/crypt_blowfish Broken Link
  • kb.juniper.net http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 Third Party Advisory
  • lists.apple.com http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html Mailing List
  • lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00015.html Third Party Advisory
  • php.net http://php.net/security/crypt_blowfish Third Party Advisory
  • support.apple.com http://support.apple.com/kb/HT5130 Third Party Advisory
  • www.debian.org http://www.debian.org/security/2011/dsa-2340 Third Party Advisory, VDB Entry
  • www.debian.org http://www.debian.org/security/2012/dsa-2399 Third Party Advisory, VDB Entry
  • www.mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2011:165 Broken Link
  • www.mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2011:178 Broken Link
  • www.mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2011:179 Broken Link
  • www.mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2011:180 Broken Link
  • www.openwall.com http://www.openwall.com/crypt/ Mailing List, Patch, Third Party Advisory
  • www.php.net http://www.php.net/ChangeLog-5.php#5.3.7 Third Party Advisory
  • www.php.net http://www.php.net/archive/2011.php#id2011-08-18-1 Patch, Vendor Advisory
  • www.postgresql.org http://www.postgresql.org/docs/8.4/static/release-8-4-9.html Patch, Vendor Advisory
  • www.redhat.com http://www.redhat.com/support/errata/RHSA-2011-1377.html Broken Link
  • www.redhat.com http://www.redhat.com/support/errata/RHSA-2011-1378.html Broken Link
  • www.redhat.com http://www.redhat.com/support/errata/RHSA-2011-1423.html Broken Link
  • www.securityfocus.com http://www.securityfocus.com/bid/49241 Third Party Advisory, VDB Entry
  • www.ubuntu.com http://www.ubuntu.com/usn/USN-1229-1 Third Party Advisory
  • exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/69319 Third Party Advisory, VDB Entry
  • nvd.nist.gov Official NVD record