PT-2009-6202 · Php+1 · Php+1

Published 2009-11-27 · Updated 2018-10-30 · CVE-2009-4018

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.11 PHP versions 5.3.x prior to 5.3.1

Description The issue concerns the proc open function in PHP, which fails to enforce certain directives. This allows attackers to execute programs with an arbitrary environment via the env parameter. For example, a crafted value of the LD LIBRARY PATH environment variable can be used for exploitation.

Recommendations For PHP versions prior to 5.2.11, update to version 5.2.11 or later. For PHP versions 5.3.x prior to 5.3.1, update to version 5.3.1 or later.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-4018

HPSBUX02543

Affected Products

Hp-Ux

Php

References · 33

• 🔥 http://bugs.php.net/bug.php?id=49026 · Exploit
• 🔥 https://exploit-db.com/exploits/11636 · Exploit
• http://marc.info/?l=oss-security&m=125897935330618&w=2 · Patch
• http://marc.info/?l=bugtraq&m=127680701405735&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3293 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4142 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4018 · Security Note
• http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/standard/proc_open.c?r1=286360&r2=286359&pathrev=286360 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3291 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3292 · Security Note
• http://openwall.com/lists/oss-security/2009/11/23/15 · Patch
• http://mandriva.com/security/advisories?name=MDVSA-2009:303 · Vendor Advisory
• http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4143 · Security Note
• http://svn.php.net/viewvc/?view=revision&revision=286360 · Patch