The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Php | — | Apply OS X security update 2008-005Apply OS X security update 2008-007 | Dec 16, 2011 | May 5, 2008 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | May 5, 2008 |
| Hpux | — | Update hpuxwsAPCH32.PHP to the latest versionUpdate hpuxwsAPCH32.PHP2 to the latest versionUpdate hpuxwsAPACHE.PHP to the latest versionUpdate hpuxwsAPACHE.PHP2 to the latest version | Aug 11, 2017 | May 5, 2008 |
| Php | — | Upgrade to PHP version 5.2.6 | Oct 1, 2012 | May 5, 2008 |
| Suse | — | Upgrade php5-mcryptUpgrade php53-pspellUpgrade php8-gdUpgrade php5-calendarUpgrade php8-fastcgiUpgrade php8-pdoUpgrade php8-curlUpgrade php5-zipUpgrade php53-iconvUpgrade php53-intlUpgrade php5-pcntlUpgrade php53-gmpUpgrade php8-bz2Upgrade php8-zlibUpgrade php53-xmlreaderUpgrade php53-opensslUpgrade apache2-mod_php5Upgrade php8-opensslUpgrade php8-enchantUpgrade php53-xmlrpcUpgrade php53-ftpUpgrade php53-gettextUpgrade php8-intlUpgrade php8-gmpUpgrade php53-dbaUpgrade php53-pearUpgrade php5-soapUpgrade php53-zipUpgrade php5-zlibUpgrade php8-ffiUpgrade php8-sysvshmUpgrade php5-dbaseUpgrade php8-zipUpgrade php5-xmlwriterUpgrade php5-dbaUpgrade php53-socketsUpgrade php53-ldapUpgrade php8-tokenizerUpgrade php53-imapUpgrade php8-sqliteUpgrade php5-wddxUpgrade php53-curlUpgrade php8-domUpgrade php8-bcmathUpgrade php8-socketsUpgrade php53-bcmathUpgrade php53-exifUpgrade php53-tokenizerUpgrade php8-sysvmsgUpgrade php8-cliUpgrade php53-develUpgrade php53-posixUpgrade php53-wddxUpgrade php8-dbaUpgrade php5-tokenizerUpgrade php5-gmpUpgrade php8-opcacheUpgrade php53-fastcgiUpgrade php53-domUpgrade php8-sodiumUpgrade php8Upgrade php8-embedUpgrade php5-gettextUpgrade php53-suhosinUpgrade php53-mysqlUpgrade php53-xslUpgrade php5-odbcUpgrade php8-readlineUpgrade php53-pgsqlUpgrade php8-xslUpgrade php5-ftpUpgrade php53-bz2Upgrade php8-fpmUpgrade php5-pgsqlUpgrade php8-exifUpgrade php8-ldapUpgrade php5-mysqlUpgrade php8-xmlreaderUpgrade php5-pearUpgrade php5-sysvmsgUpgrade php5-sysvshmUpgrade php5-xslUpgrade php8-iconvUpgrade php8-pharUpgrade php5-hashUpgrade php5-gdUpgrade php53-xmlwriterUpgrade php53-mbstringUpgrade php8-pcntlUpgrade php8-soapUpgrade php5-shmopUpgrade php5-fastcgiUpgrade php53-snmpUpgrade php8-odbcUpgrade php8-ctypeUpgrade php8-posixUpgrade php5-pspellUpgrade php53-sqliteUpgrade php8-sysvsemUpgrade php53-jsonUpgrade php53-sysvshmUpgrade php5-ldapUpgrade php5-iconvUpgrade php5-jsonUpgrade php53-tidyUpgrade php53-odbcUpgrade php8-develUpgrade php5-pdoUpgrade php8-pgsqlUpgrade php53-gdUpgrade php5-xmlreaderUpgrade php8-gettextUpgrade php53-pcntlUpgrade php8-xmlwriterUpgrade php5Upgrade php5-bcmathUpgrade php53-shmopUpgrade php5-xmlrpcUpgrade php8-snmpUpgrade apache2-mod_php8Upgrade php8-mysqlUpgrade php53Upgrade php53-zlibUpgrade php53-sysvsemUpgrade php5-curlUpgrade php5-sysvsemUpgrade php5-domUpgrade php5-mbstringUpgrade php53-mcryptUpgrade php5-exifUpgrade php53-fileinfoUpgrade php5-suhosinUpgrade php8-shmopUpgrade php5-bz2Upgrade php5-opensslUpgrade php53-sysvmsgUpgrade php53-pdoUpgrade php8-fpm-apacheUpgrade php53-readlineUpgrade php8-ftpUpgrade php53-soapUpgrade apache2-mod_php53Upgrade php5-snmpUpgrade php8-tidyUpgrade php8-mbstringUpgrade php53-calendarUpgrade php8-fileinfoUpgrade php53-ctypeUpgrade php8-calendarUpgrade php5-ctype | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-curlUpgrade libapache2-mod-php5Upgrade php5-cgiUpgrade php5-cli | Nov 8, 2024 | May 5, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub