PT-2008-2224 · Php+1 · Php+1

Ryan Permeh · Published 2008-05-05 · Updated 2024-06-15 · CVE-2008-0599

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.6

Description The issue arises from the init request info function in sapi/cgi/cgi main.c, which does not properly consider operator precedence when calculating the length of PATH TRANSLATED. This might allow remote attackers to execute arbitrary code via a crafted URI.

Recommendations For versions prior to 5.2.6, update to version 5.2.6 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-131

Related Identifiers

CVE-2008-0599

DTSA-135-1

HPSBUX02342

HPSBUX02431

HPSBUX02465

OPENSUSE-SU-2024:11167-1

OPENSUSE-SU-2024:11169-1

RHSA-2008:0505

Affected Products

Hp-Ux

Php

References · 179

• 🔥 http://cvs.php.net/viewvc.cgi/php-src/sapi/cgi/cgi_main.c?r1=1.267.2.15.2.50.2.12&r2=1.267.2.15.2.50.2.13&diff_format=u · Exploit
• http://redhat.com/support/errata/RHSA-2008-0505.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0005 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2371 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6203 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2939 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3660 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3658 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01476437 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:128 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2364 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3659 · Security Note
• https://redhat.com/archives/fedora-package-announce/2008-June/msg00779.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625 · Security Note