PT-2012-5362 · Google+3 · Google Chrome+3

Raphael Geissert · Published 2012-09-07 · Updated 2023-02-13 · CVE-2012-4388

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions 5.4.0RC2 through 5.4.0

Description The issue arises from the sapi header op function in main/SAPI.c, which fails to properly determine a pointer during checks for %0D sequences, allowing remote attackers to bypass an HTTP response-splitting protection mechanism. This can be achieved via a crafted URL and is related to improper interaction between the PHP header function and certain browsers, such as Internet Explorer and Google Chrome.

Recommendations For PHP versions 5.4.0RC2 through 5.4.0, update to a version that properly fixes the issue, as the current fix is incorrect and based on an earlier vulnerability.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-4388

Affected Products

Google Chrome

Internet Explorer

Php

Suse

References · 13

• 🔥 http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/main/SAPI.c?r1=323986&r2=323985&pathrev=323986 · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html · Vendor Advisory
• https://bugs.php.net/bug.php?id=60227 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-4388 · Security Note
• http://ubuntu.com/usn/USN-1569-1 · Vendor Advisory
• http://openwall.com/lists/oss-security/2012/09/05/15 · Note
• http://openwall.com/lists/oss-security/2012/08/29/5 · Note
• http://openwall.com/lists/oss-security/2012/09/02/1 · Note
• http://openwall.com/lists/oss-security/2012/09/07/3 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4388 · Note
• http://security-tracker.debian.org/tracker/CVE-2012-4388 · Note
• http://article.gmane.org/gmane.comp.php.devel/70584 · Note
• http://securitytracker.com/id?1027463 · Note