PHP "crypt ()" MD5 Salt Security Vulnerability

Release date:
Updated on:

Affected Systems:
PHP 5.3.x
Description:
--------------------------------------------------------------------------------
PHP is a popular scripting environment.

PHP has a security vulnerability in the implementation of the "crypt ()" function. Remote attackers can exploit this vulnerability to bypass certain security restrictions.

This vulnerability occurs when the "crypt ()" function generates an MD5 hash with a salt and only returns the salt.

<* Source: jo, feuersee.de

Link: https://bugs.php.net/bug.php? Id = 55439
Http://www.php.net/archive/2011.php#id2011-08-22-1
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

PHP
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.php.net