PT-2012-2892 · Php+4 · Php+4

I0N1C · Publicado 2012-02-02 · Atualizado 2024-06-15 · CVE-2012-0830

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP version 5.3.9

Description The issue allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables in the php register variable ex function. This problem exists due to an incorrect fix.

Recommendations For PHP version 5.3.9, consider upgrading to a newer version that correctly addresses the issue, as the current version has an incorrect fix that leads to this problem. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CESA-2012_0093

CVE-2012-0830

DSA-2403-1

HPSBUX02791

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

RHSA-2012:0092

RHSA-2012:0093

RHSA-2012_0092

RHSA-2012_0093

Produtos afetados

Centos

Hp-Ux

Php

Red Hat

Suse

Referências · 182

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/php_cgi_arg_injection.rb · Exploit
• 🔥 https://github.com/0xl0k1/CVE-2012-1823 · Exploit
• 🔥 https://github.com/Unix13/metasploitable2 · Exploit
• 🔥 http://securityfocus.com/bid/51830 · Exploit
• 🔥 https://exploit-db.com/exploits/18460 · Exploit
• 🔥❌ https://github.com/Fatalitysec/CVE-2012-1823 · Exploit, Deleted
• 🔥 https://gist.github.com/1725489 · Exploit
• 🔥 http://thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos · Exploit
• 🔥❌ https://github.com/theykillmeslowly/CVE-2012-1823 · Exploit, Deleted
• https://github.com/tardummy01/oscp_scripts-1 · Nota
• https://suse.com/security/cve/CVE-2014-3622 · Nota
• https://suse.com/security/cve/CVE-2019-9020 · Nota
• https://suse.com/security/cve/CVE-2010-2225 · Nota
• https://suse.com/security/cve/CVE-2012-3365 · Nota
• https://suse.com/security/cve/CVE-2010-3710 · Nota