The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Php | — | Apply OS X security update 2008-007Apply OS X security update 2008-005 | Dec 16, 2011 | May 5, 2008 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | May 5, 2008 |
| Hpux | — | Update hpuxwsAPACHE.PHP2 to the latest versionUpdate hpuxwsAPACHE.PHP to the latest versionUpdate hpuxwsAPCH32.PHP2 to the latest versionUpdate hpuxwsAPCH32.PHP to the latest version | Aug 11, 2017 | May 5, 2008 |
| Php | — | Upgrade to PHP version 5.2.6 | Oct 1, 2012 | May 5, 2008 |
| Suse | — | Upgrade php8-develUpgrade php8-posixUpgrade apache2-mod_php53Upgrade php53-sysvmsgUpgrade php5-ctypeUpgrade php8-odbcUpgrade php5-pearUpgrade php5-pdoUpgrade php5-bz2Upgrade php5-xmlrpcUpgrade php5-iconvUpgrade php53-odbcUpgrade php5-jsonUpgrade php5-pspellUpgrade php5-bcmathUpgrade php5-hashUpgrade php5-ldapUpgrade php8-mbstringUpgrade php8-xmlreaderUpgrade php8-calendarUpgrade php53-soapUpgrade php53-shmopUpgrade php53-sysvsemUpgrade php5-curlUpgrade php8-mysqlUpgrade php53-zlibUpgrade php5-sysvsemUpgrade php5-sysvmsgUpgrade php8-sysvsemUpgrade php5-suhosinUpgrade php53-sqliteUpgrade php8-fileinfoUpgrade php8-ctypeUpgrade php5-domUpgrade php8-iconvUpgrade php5-sysvshmUpgrade php8-snmpUpgrade php53-jsonUpgrade php5-exifUpgrade php8-pharUpgrade php5-xslUpgrade php53-tidyUpgrade php8-fpm-apacheUpgrade php5-mbstringUpgrade php53-pdoUpgrade php53-fileinfoUpgrade php53-sysvshmUpgrade php8-ftpUpgrade php8-tidyUpgrade php5-fastcgiUpgrade php53-pcntlUpgrade php5-shmopUpgrade php5-gdUpgrade php8-xmlwriterUpgrade php53-readlineUpgrade php5-snmpUpgrade php53-mcryptUpgrade php53-calendarUpgrade php8-pgsqlUpgrade php8-soapUpgrade php53-mbstringUpgrade php53-xmlwriterUpgrade php53Upgrade apache2-mod_php8Upgrade php8-gettextUpgrade php53-gdUpgrade php5-xmlreaderUpgrade php53-ctypeUpgrade php5Upgrade php8-pcntlUpgrade php8-shmopUpgrade php53-snmpUpgrade php5-opensslUpgrade php8-ffiUpgrade php5-dbaseUpgrade php53-pearUpgrade php5-pcntlUpgrade php53-posixUpgrade php53-bz2Upgrade php8-zipUpgrade php53-suhosinUpgrade php5-dbaUpgrade php8-sqliteUpgrade php5-pgsqlUpgrade php8-readlineUpgrade php5-gettextUpgrade php8-xslUpgrade php53-develUpgrade php8-cliUpgrade php53-pgsqlUpgrade php5-tokenizerUpgrade php8-opensslUpgrade php8-fpmUpgrade php5-soapUpgrade php53-domUpgrade php5-mcryptUpgrade php8-curlUpgrade php8-bz2Upgrade php5-zlibUpgrade apache2-mod_php5Upgrade php53-pspellUpgrade php53-ldapUpgrade php5-gmpUpgrade php8-gdUpgrade php53-gettextUpgrade php8-zlibUpgrade php8-pdoUpgrade php53-curlUpgrade php53-tokenizerUpgrade php53-bcmathUpgrade php8Upgrade php8-ldapUpgrade php5-wddxUpgrade php53-iconvUpgrade php53-exifUpgrade php8-opcacheUpgrade php8-socketsUpgrade php53-wddxUpgrade php53-zipUpgrade php5-ftpUpgrade php8-bcmathUpgrade php5-mysqlUpgrade php53-mysqlUpgrade php5-xmlwriterUpgrade php8-sysvmsgUpgrade php8-intlUpgrade php53-xmlreaderUpgrade php53-dbaUpgrade php53-ftpUpgrade php8-tokenizerUpgrade php53-xmlrpcUpgrade php8-gmpUpgrade php8-domUpgrade php8-enchantUpgrade php5-zipUpgrade php8-embedUpgrade php53-fastcgiUpgrade php5-calendarUpgrade php53-gmpUpgrade php8-fastcgiUpgrade php8-dbaUpgrade php53-xslUpgrade php8-exifUpgrade php53-intlUpgrade php53-opensslUpgrade php53-imapUpgrade php53-socketsUpgrade php8-sysvshmUpgrade php8-sodiumUpgrade php5-odbc | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php5-cliUpgrade php5-curl | Nov 8, 2024 | May 5, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub