PT-2012-1523 · Google+5 · Google Chrome+5

Raphael Geissert · Published 2012-08-30 · Updated 2013-12-11 · CVE-2011-1398

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.11 PHP versions 5.4.x prior to 5.4.0RC2

Description The issue is related to the sapi header op function in PHP, which does not properly check for %0D sequences, also known as carriage return characters. This allows remote attackers to bypass an HTTP response-splitting protection mechanism by crafting a specific URL. The issue is related to the interaction between the PHP header function and certain browsers, such as Internet Explorer and Google Chrome.

Recommendations For PHP versions prior to 5.3.11, update to version 5.3.11 or later. For PHP versions 5.4.x prior to 5.4.0RC2, update to version 5.4.0RC2 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CESA-2013_0514

CVE-2011-1398

RHSA-2013:0514

RHSA-2013:1307

RHSA-2013:1814

RHSA-2013_0514

RHSA-2013_1307

RHSA-2013_1814

SUSE-SU-2012_1156-1

SUSE-SU-2012_1156-2

Affected Products

Centos

Google Chrome

Internet Explorer

Php

Red Hat

Suse

References · 55

• 🔥 https://github.com/shelld3v/CVE-2012-2688 · Exploit
• 🔥 https://exploit-db.com/exploits/37688 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1398 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0831 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4388 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-1398 · Security Note
• https://bdu.fstec.ru/vul/2022-02597 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html · Vendor Advisory
• http://ubuntu.com/usn/USN-1569-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2013-0514.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2688 · Security Note
• https://bdu.fstec.ru/vul/2022-02633 · Security Note
• https://bdu.fstec.ru/vul/2022-02632 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-1307.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02631 · Security Note