PT-2012-3955 · Php+1 · Php+1

Nyt-Php · Publicado 2012-05-11 · Atualizado 2017-08-29 · CVE-2012-2329

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.4.0 through 5.4.2

Description The issue is related to a buffer overflow in the apache request headers function, which can be triggered by a long string in the header of an HTTP request, causing the application to crash.

Recommendations For PHP versions 5.4.0 through 5.4.2, update to version 5.4.3 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-2329

Produtos afetados

Apache Http Server

Php

Referências · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/php_apache_request_headers_bof.rb · Exploit
• 🔥 https://exploit-db.com/exploits/19231 · Exploit
• http://php.net/archive/2012.php#id2012-05-08-1 · Nota
• http://securityfocus.com/bid/53455 · Nota
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2329 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=820000 · Correção
• http://php.net/ChangeLog-5.php#5.4.3 · Nota
• https://bugs.php.net/bug.php?id=61807 · Nota
• http://secunia.com/advisories/49014 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75545 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2329 · Nota de Segurança