PT-2012-2892 · Php+4 · Php+4

I0N1C · Published 2012-02-02 · Updated 2024-06-15 · CVE-2012-0830

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP version 5.3.9

Description The issue allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables in the php register variable ex function. This problem exists due to an incorrect fix.

Recommendations For PHP version 5.3.9, consider upgrading to a newer version that correctly addresses the issue, as the current version has an incorrect fix that leads to this problem. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CESA-2012_0093

CVE-2012-0830

DSA-2403-1

HPSBUX02791

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

RHSA-2012:0092

RHSA-2012:0093

RHSA-2012_0092

RHSA-2012_0093

Affected Products

Centos

Hp-Ux

Php

Red Hat

Suse

References · 182

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/php_cgi_arg_injection.rb · Exploit
• 🔥 https://github.com/0xl0k1/CVE-2012-1823 · Exploit
• 🔥 https://github.com/Unix13/metasploitable2 · Exploit
• 🔥 http://securityfocus.com/bid/51830 · Exploit
• 🔥 https://exploit-db.com/exploits/18460 · Exploit
• 🔥❌ https://github.com/Fatalitysec/CVE-2012-1823 · Exploit, Deleted
• 🔥 https://gist.github.com/1725489 · Exploit
• 🔥 http://thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos · Exploit
• 🔥❌ https://github.com/theykillmeslowly/CVE-2012-1823 · Exploit, Deleted
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2311 · Security Note
• https://bdu.fstec.ru/vul/2021-04416 · Security Note
• http://lists.apple.com/archives/security-announce/2012/May/msg00001.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0092.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02630 · Security Note