The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Php | — | Apply OS X security update 2008-007Apply OS X security update 2008-005 | Dec 16, 2011 | May 5, 2008 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | May 5, 2008 |
| Hpux | — | Update hpuxwsAPCH32.PHP to the latest versionUpdate hpuxwsAPCH32.PHP2 to the latest versionUpdate hpuxwsAPACHE.PHP to the latest versionUpdate hpuxwsAPACHE.PHP2 to the latest version | Aug 11, 2017 | May 5, 2008 |
| Php | — | Upgrade to PHP version 5.2.6 | Oct 1, 2012 | May 5, 2008 |
| Suse | — | Upgrade php5-zlibUpgrade php53-ftpUpgrade php53-pgsqlUpgrade php8-ffiUpgrade php53-develUpgrade php8-readlineUpgrade php8-xslUpgrade php5-xmlwriterUpgrade php53-posixUpgrade php8-fastcgiUpgrade php8-zipUpgrade php53-ldapUpgrade php53-opensslUpgrade php5-pgsqlUpgrade php8-zlibUpgrade php53-curlUpgrade php53-xmlreaderUpgrade apache2-mod_php5Upgrade php8-opensslUpgrade php8-pdoUpgrade php8-curlUpgrade php53-gmpUpgrade php5-zipUpgrade php53-iconvUpgrade php53-intlUpgrade php8-embedUpgrade php53-suhosinUpgrade php53-tokenizerUpgrade php5-tokenizerUpgrade php8-dbaUpgrade php8-fpmUpgrade php5-pcntlUpgrade php5-dbaUpgrade php8-sqliteUpgrade php5-calendarUpgrade php53-wddxUpgrade php53-pspellUpgrade php53-bz2Upgrade php53-gettextUpgrade php8-sodiumUpgrade php8-sysvshmUpgrade php53-xslUpgrade php53-exifUpgrade php8-enchantUpgrade php53-domUpgrade php8Upgrade php53-fastcgiUpgrade php5-mcryptUpgrade php8-bcmathUpgrade php8-socketsUpgrade php8-tokenizerUpgrade php5-gmpUpgrade php5-dbaseUpgrade php8-gdUpgrade php8-gmpUpgrade php8-sysvmsgUpgrade php5-soapUpgrade php8-ldapUpgrade php53-socketsUpgrade php53-xmlrpcUpgrade php8-intlUpgrade php53-mysqlUpgrade php53-imapUpgrade php5-ftpUpgrade php8-exifUpgrade php5-mysqlUpgrade php8-cliUpgrade php5-odbcUpgrade php8-domUpgrade php53-zipUpgrade php53-dbaUpgrade php5-gettextUpgrade php5-wddxUpgrade php53-pearUpgrade php53-bcmathUpgrade php8-opcacheUpgrade php8-bz2Upgrade php5-domUpgrade apache2-mod_php8Upgrade php5-gdUpgrade php8-xmlreaderUpgrade php8-sysvsemUpgrade php53-zlibUpgrade php53-mbstringUpgrade php8-odbcUpgrade php53-pdoUpgrade php5-sysvsemUpgrade php53-mcryptUpgrade php53-snmpUpgrade php53-fileinfoUpgrade php5-exifUpgrade php8-ctypeUpgrade php5-shmopUpgrade php5-fastcgiUpgrade php5-bz2Upgrade php5-opensslUpgrade php8-fileinfoUpgrade apache2-mod_php53Upgrade php5-pdoUpgrade php5-suhosinUpgrade php8-ftpUpgrade php8-tidyUpgrade php8-pcntlUpgrade php53-gdUpgrade php8-soapUpgrade php5-xmlreaderUpgrade php8-pgsqlUpgrade php8-gettextUpgrade php5-curlUpgrade php8-posixUpgrade php53-pcntlUpgrade php8-develUpgrade php53-sysvshmUpgrade php8-mysqlUpgrade php8-fpm-apacheUpgrade php5-mbstringUpgrade php53-tidyUpgrade php8-xmlwriterUpgrade php8-mbstringUpgrade php53-xmlwriterUpgrade php53-shmopUpgrade php53-calendarUpgrade php5-bcmathUpgrade php5-snmpUpgrade php5-ctypeUpgrade php53-sysvsemUpgrade php5-iconvUpgrade php5-jsonUpgrade php5-ldapUpgrade php5-pspellUpgrade php53-sysvmsgUpgrade php5-xmlrpcUpgrade php5-hashUpgrade php8-iconvUpgrade php53-odbcUpgrade php8-pharUpgrade php53-ctypeUpgrade php8-shmopUpgrade php53Upgrade php5-pearUpgrade php8-snmpUpgrade php5-xslUpgrade php5-sysvmsgUpgrade php5-sysvshmUpgrade php8-calendarUpgrade php5Upgrade php53-readlineUpgrade php53-soapUpgrade php53-sqliteUpgrade php53-json | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-curlUpgrade php5-cliUpgrade php5-cgiUpgrade libapache2-mod-php5 | Nov 8, 2024 | May 5, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub