PT-2008-2224 · Php+1 · Php+1

Ryan Permeh · Publicado 2008-05-05 · Atualizado 2024-06-15 · CVE-2008-0599

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.6

Description The issue arises from the init request info function in sapi/cgi/cgi main.c, which does not properly consider operator precedence when calculating the length of PATH TRANSLATED. This might allow remote attackers to execute arbitrary code via a crafted URI.

Recommendations For versions prior to 5.2.6, update to version 5.2.6 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-131

Identificadores relacionados

CVE-2008-0599

DTSA-135-1

HPSBUX02342

HPSBUX02431

HPSBUX02465

OPENSUSE-SU-2024:11167-1

OPENSUSE-SU-2024:11169-1

RHSA-2008:0505

Produtos afetados

Hp-Ux

Php

Referências · 179

• 🔥 http://cvs.php.net/viewvc.cgi/php-src/sapi/cgi/cgi_main.c?r1=1.267.2.15.2.50.2.12&r2=1.267.2.15.2.50.2.13&diff_format=u · Exploit
• http://redhat.com/support/errata/RHSA-2008-0505.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3622 · Nota
• https://suse.com/security/cve/CVE-2019-9020 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5510 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0005 · Nota de Segurança
• https://suse.com/security/cve/CVE-2010-2225 · Nota
• https://suse.com/security/cve/CVE-2012-3365 · Nota
• http://securityfocus.com/bid/29009 · Nota
• https://suse.com/security/cve/CVE-2006-1494 · Nota
• https://suse.com/security/cve/CVE-2020-7063 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2371 · Nota de Segurança
• https://suse.com/security/cve/CVE-2010-3710 · Nota
• https://suse.com/security/cve/CVE-2015-3415 · Nota
• https://suse.com/security/cve/CVE-2019-11039 · Nota