The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Php | — | Apply OS X security update 2008-007Apply OS X security update 2008-005 | Dec 16, 2011 | May 5, 2008 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | May 5, 2008 |
| Hpux | — | Update hpuxwsAPACHE.PHP2 to the latest versionUpdate hpuxwsAPACHE.PHP to the latest versionUpdate hpuxwsAPCH32.PHP2 to the latest versionUpdate hpuxwsAPCH32.PHP to the latest version | Aug 11, 2017 | May 5, 2008 |
| Php | — | Upgrade to PHP version 5.2.6 | Oct 1, 2012 | May 5, 2008 |
| Suse | — | Upgrade php8-develUpgrade php8-posixUpgrade apache2-mod_php53Upgrade php53-sysvmsgUpgrade php5-ctypeUpgrade php8-odbcUpgrade php5-pearUpgrade php5-pdoUpgrade php5-bz2Upgrade php5-xmlrpcUpgrade php5-iconvUpgrade php53-odbcUpgrade php5-jsonUpgrade php5-pspellUpgrade php5-bcmathUpgrade php5-hashUpgrade php5-ldapUpgrade php8-mbstringUpgrade php8-xmlreaderUpgrade php8-calendarUpgrade php53-soapUpgrade php53-shmopUpgrade php53-sysvsemUpgrade php5-curlUpgrade php8-mysqlUpgrade php53-zlibUpgrade php5-sysvsemUpgrade php5-sysvmsgUpgrade php8-sysvsemUpgrade php5-suhosinUpgrade php53-sqliteUpgrade php8-fileinfoUpgrade php8-ctypeUpgrade php5-domUpgrade php8-iconvUpgrade php5-sysvshmUpgrade php8-snmpUpgrade php53-jsonUpgrade php5-exifUpgrade php8-pharUpgrade php5-xslUpgrade php53-tidyUpgrade php8-fpm-apacheUpgrade php5-mbstringUpgrade php53-pdoUpgrade php53-fileinfoUpgrade php53-sysvshmUpgrade php8-ftpUpgrade php8-tidyUpgrade php5-fastcgiUpgrade php53-pcntlUpgrade php5-shmopUpgrade php5-gdUpgrade php8-xmlwriterUpgrade php53-readlineUpgrade php5-snmpUpgrade php53-mcryptUpgrade php53-calendarUpgrade php8-pgsqlUpgrade php8-soapUpgrade php53-mbstringUpgrade php53-xmlwriterUpgrade php53Upgrade apache2-mod_php8Upgrade php8-gettextUpgrade php53-gdUpgrade php5-xmlreaderUpgrade php53-ctypeUpgrade php5Upgrade php8-pcntlUpgrade php8-shmopUpgrade php53-snmpUpgrade php5-opensslUpgrade php8-ffiUpgrade php5-dbaseUpgrade php53-pearUpgrade php5-pcntlUpgrade php53-posixUpgrade php53-bz2Upgrade php8-zipUpgrade php53-suhosinUpgrade php5-dbaUpgrade php8-sqliteUpgrade php5-pgsqlUpgrade php8-readlineUpgrade php5-gettextUpgrade php8-xslUpgrade php53-develUpgrade php8-cliUpgrade php53-pgsqlUpgrade php5-tokenizerUpgrade php8-opensslUpgrade php8-fpmUpgrade php5-soapUpgrade php53-domUpgrade php5-mcryptUpgrade php8-curlUpgrade php8-bz2Upgrade php5-zlibUpgrade apache2-mod_php5Upgrade php53-pspellUpgrade php53-ldapUpgrade php5-gmpUpgrade php8-gdUpgrade php53-gettextUpgrade php8-zlibUpgrade php8-pdoUpgrade php53-curlUpgrade php53-tokenizerUpgrade php53-bcmathUpgrade php8Upgrade php8-ldapUpgrade php5-wddxUpgrade php53-iconvUpgrade php53-exifUpgrade php8-opcacheUpgrade php8-socketsUpgrade php53-wddxUpgrade php53-zipUpgrade php5-ftpUpgrade php8-bcmathUpgrade php5-mysqlUpgrade php53-mysqlUpgrade php5-xmlwriterUpgrade php8-sysvmsgUpgrade php8-intlUpgrade php53-xmlreaderUpgrade php53-dbaUpgrade php53-ftpUpgrade php8-tokenizerUpgrade php53-xmlrpcUpgrade php8-gmpUpgrade php8-domUpgrade php8-enchantUpgrade php5-zipUpgrade php8-embedUpgrade php53-fastcgiUpgrade php5-calendarUpgrade php53-gmpUpgrade php8-fastcgiUpgrade php8-dbaUpgrade php53-xslUpgrade php8-exifUpgrade php53-intlUpgrade php53-opensslUpgrade php53-imapUpgrade php53-socketsUpgrade php8-sysvshmUpgrade php8-sodiumUpgrade php5-odbc | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php5-cliUpgrade php5-curl | Nov 8, 2024 | May 5, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub