CVE-2012-2317

Publication date 14 May 2012

Last updated 24 July 2024

The Debian php_crypt_revamped.patch patch for PHP 5.3.x, as used in the php5 package before 5.3.3-7+squeeze4 in Debian GNU/Linux squeeze, the php5 package before 5.3.2-1ubuntu4.17 in Ubuntu 10.04 LTS, and the php5 package before 5.3.5-1ubuntu7.10 in Ubuntu 11.04, does not properly handle an empty salt string, which might allow remote attackers to bypass authentication by leveraging an application that relies on the PHP crypt function to choose a salt for password hashing.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
php5	12.04 LTS precise	Not affected
	11.10 oneiric	Not affected
	11.04 natty	Fixed 5.3.5-1ubuntu7.10
	10.04 LTS lucid	Fixed 5.3.2-1ubuntu4.17
	8.04 LTS hardy	Not affected

Notes

mdeslaur

introduced in php_crypt_revamped.patch patch in 5.3.2-1 reproducer in debian bug also fixed in 5.3.3-7+squeeze4

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
php5	Vendor: http://anonscm.debian.org/gitweb/?p=pkg-php/php.git;a=commit;h=67c8dbacdc336c93fa84bb1d76a790704c296fec

References

Related Ubuntu Security Notices (USN)