{"api_version":"1","generated_at":"2026-07-23T20:56:06+00:00","cve":"CVE-2011-3189","urls":{"html":"https://cve.report/CVE-2011-3189","api":"https://cve.report/api/cve/CVE-2011-3189.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-3189","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-3189"},"summary":{"title":"CVE-2011-3189","description":"The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass authentication via an arbitrary password, a different vulnerability than CVE-2011-2483.","state":"PUBLISHED","assigner":"redhat","published_at":"2011-08-25 14:22:48","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-310","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.php.net/archive/2011.php#id2011-08-23-1","name":"http://www.php.net/archive/2011.php#id2011-08-23-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"PHP: News Archive - 2011","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2011/08/23/4","name":"http://www.openwall.com/lists/oss-security/2011/08/23/4","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - CVE assignment - PHP salt flaw CVE-2011-3189","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.php.net/ChangeLog-5.php#5.3.8","name":"http://www.php.net/ChangeLog-5.php#5.3.8","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"PHP: PHP 5 ChangeLog","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.apple.com/kb/HT5130","name":"http://support.apple.com/kb/HT5130","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"About the security content of OS X Lion v10.7.3 and Security Update 2012-001","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugs.php.net/bug.php?id=55439","name":"https://bugs.php.net/bug.php?id=55439","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"PHP :: Bug #55439 :: crypt() returns only the salt for MD5","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69429","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69429","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=380261","name":"https://bugs.gentoo.org/show_bug.cgi?id=380261","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"380261 – (CVE-2011-3189) =dev-lang/php-5.3.7: crypt() returns only the salt for MD5 (CVE-2011-3189)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","name":"http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/45678","name":"http://secunia.com/advisories/45678","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"PHP \"crypt()\" MD5 Salt Security Issue - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/74726","name":"http://osvdb.org/74726","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3189","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3189","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"3189","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"php","cpe5":"php","cpe6":"5.3.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T23:22:27.687Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"74726","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/74726"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.php.net/ChangeLog-5.php#5.3.8"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugs.gentoo.org/show_bug.cgi?id=380261"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.apple.com/kb/HT5130"},{"name":"45678","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/45678"},{"name":"[oss-security] 20110823 CVE assignment - PHP salt flaw CVE-2011-3189","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2011/08/23/4"},{"name":"APPLE-SA-2012-02-01-1","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"],"url":"http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugs.php.net/bug.php?id=55439"},{"name":"php-crypt-security-bypass(69429)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69429"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.php.net/archive/2011.php#id2011-08-23-1"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-08-23T00:00:00.000Z","descriptions":[{"lang":"en","value":"The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass authentication via an arbitrary password, a different vulnerability than CVE-2011-2483."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"74726","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/74726"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.php.net/ChangeLog-5.php#5.3.8"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugs.gentoo.org/show_bug.cgi?id=380261"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.apple.com/kb/HT5130"},{"name":"45678","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/45678"},{"name":"[oss-security] 20110823 CVE assignment - PHP salt flaw CVE-2011-3189","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2011/08/23/4"},{"name":"APPLE-SA-2012-02-01-1","tags":["vendor-advisory","x_refsource_APPLE"],"url":"http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugs.php.net/bug.php?id=55439"},{"name":"php-crypt-security-bypass(69429)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69429"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.php.net/archive/2011.php#id2011-08-23-1"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2011-3189","datePublished":"2011-08-25T14:00:00.000Z","dateReserved":"2011-08-19T00:00:00.000Z","dateUpdated":"2024-08-06T23:22:27.687Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-08-25 14:22:48","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-310","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"ACDF768D-7F5A-4042-B7DD-398F65F3F094"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"3189","Ordinal":"1","Title":"CVE-2011-3189","CVE":"CVE-2011-3189","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"3189","Ordinal":"1","NoteData":"The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass authentication via an arbitrary password, a different vulnerability than CVE-2011-2483.","Type":"Description","Title":"CVE-2011-3189"},{"CveYear":"2011","CveId":"3189","Ordinal":"2","NoteData":"2011-08-25","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"3189","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}