Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread safety for libc crypt function calls using protection schemes such as a mutex, which creates race conditions that allow remote attackers to overwrite internal program memory and gain system access.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP crypt加密函数操作机制实现漏洞
Vulnerability Description
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的crypt()函数实现的操作机制上存在漏洞，远程攻击者可能利用此漏洞绕过认证。 如果在多线程系统上运行的话，则PHP的libc crypt()函数无法确保线程安全。例如，假设两个线程同时通过crypt()使用相同的内部内存区域验证口令的话，就会导致所有两个crypt()操作返回无效的结果，或导致其中一个操作覆盖另一个操作的结果。在这种情况下如果一个线程使用正确的口令调用了crypt()的话，则在此期间使用错误口令的线程
CVSS Information
N/A
Vulnerability Type
N/A