PT-2011-1245 · Php · Php

Published 2011-02-02 · Updated 2018-10-30 · CVE-2011-0755

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.4

Description The issue is related to an integer overflow in the mt rand function, which can make it easier for attackers to predict the return values. This can be achieved by leveraging a script's use of a large max parameter, allowing attackers to forecast the returned values. The exploitation of this issue may enable remote attackers to predict the return values.

Recommendations For PHP versions prior to 5.3.4, update to version 5.3.4 or later to resolve the issue. As a temporary workaround, consider avoiding the use of large max parameters in the mt rand function to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

BDU:2022-02627

CVE-2011-0755

Affected Products

Php

References · 7

• 🔥 http://bugs.php.net/46587 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-0755 · Security Note
• https://bdu.fstec.ru/vul/2022-02627 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12589 · Note
• http://php.net/ChangeLog-5.php · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0755 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65426 · Note