sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | May 11, 2012 |
| Apple Osx Note | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Aug 28, 2015 | May 11, 2012 |
| Apple Osx Php | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Sep 27, 2012 | May 11, 2012 |
| Centos_linux | — | Upgrade php53-commonUpgrade php-pspellUpgrade php-processUpgrade php53-xmlrpcUpgrade php53-intlUpgrade php53-gdUpgrade php-dbaUpgrade php-xmlrpcUpgrade php53-pdoUpgrade php-snmpUpgrade php-imapUpgrade php53-pspellUpgrade php-xmlUpgrade php53-imapUpgrade php53-cliUpgrade php53-xmlUpgrade php-tidyUpgrade php-recodeUpgrade php-embeddedUpgrade phpUpgrade php-soapUpgrade php53Upgrade php53-snmpUpgrade php-pdoUpgrade php-enchantUpgrade php53-soapUpgrade php-gdUpgrade php-bcmathUpgrade php-cliUpgrade php53-develUpgrade php53-dbaUpgrade php-mbstringUpgrade php-ztsUpgrade php53-ldapUpgrade php53-bcmathUpgrade php-develUpgrade php-ncursesUpgrade php-pgsqlUpgrade php53-mbstringUpgrade php53-pgsqlUpgrade php53-mysqlUpgrade php-intlUpgrade php-odbcUpgrade php-commonUpgrade php-ldapUpgrade php-mysqlUpgrade php53-processUpgrade php53-odbc | Dec 1, 2016 | May 11, 2012 |
| Freebsd | — | Upgrade php5Upgrade php4Upgrade php53Upgrade php52 | Dec 10, 2025 | May 12, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | May 11, 2012 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | May 11, 2012 |
| Hpux | — | Update hpuxws22APACHE.AUTH_LDAP2 to the latest versionUpdate hpuxwsAPACHE.MOD_PERL2 to the latest versionUpdate hpuxws22APACHE.MOD_JK to the latest versionUpdate hpuxwsAPACHE.AUTH_LDAP to the latest versionUpdate hpuxws22APCH32.PHP to the latest versionUpdate hpuxws22APACHE.MOD_JK2 to the latest versionUpdate hpuxws22APCH32.WEBPROXY2 to the latest versionUpdate hpuxws22APCH32.MOD_PERL2 to the latest versionUpdate hpuxws22APACHE.MOD_PERL2 to the latest versionUpdate hpuxws22APCH32.MOD_PERL to the latest versionUpdate hpuxws22APACHE.MOD_PERL to the latest versionUpdate hpuxwsAPACHE.PHP2 to the latest versionUpdate hpuxws22APCH32.WEBPROXY to the latest versionUpdate hpuxwsAPACHE.APACHE to the latest versionUpdate hpuxwsAPACHE.PHP to the latest versionUpdate hpuxws22APCH32.MOD_JK2 to the latest versionUpdate hpuxws22APCH32.MOD_JK to the latest versionUpdate hpuxwsAPACHE.MOD_PERL to the latest versionUpdate hpuxws22APCH32.PHP2 to the latest versionUpdate hpuxws22APACHE.APACHE2 to the latest versionUpdate hpuxws22APACHE.WEBPROXY to the latest versionUpdate hpuxwsAPACHE.MOD_JK2 to the latest versionUpdate hpuxws22APCH32.APACHE2 to the latest versionUpdate hpuxws22APACHE.AUTH_LDAP to the latest versionUpdate hpuxws22APCH32.APACHE to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP2 to the latest versionUpdate hpuxws22APACHE.WEBPROXY2 to the latest versionUpdate hpuxwsAPACHE.APACHE2 to the latest versionUpdate hpuxwsAPACHE.AUTH_LDAP2 to the latest versionUpdate hpuxws22APACHE.PHP2 to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP to the latest versionUpdate hpuxws22APACHE.APACHE to the latest versionUpdate hpuxwsAPACHE.MOD_JK to the latest versionUpdate hpuxws22APACHE.PHP to the latest versionUpdate hpuxwsAPACHE.WEBPROXY to the latest version | Aug 11, 2017 | May 11, 2012 |
| Oracle_linux | — | Upgrade php53-bcmathUpgrade php53-pspellUpgrade php-embeddedUpgrade php53-intlUpgrade phpUpgrade php-processUpgrade php-gdUpgrade php53-mysqlUpgrade php-ncursesUpgrade php-pgsqlUpgrade php53-cliUpgrade php53-ldapUpgrade php-enchantUpgrade php53-pgsqlUpgrade php53-xmlrpcUpgrade php53-snmpUpgrade php53-dbaUpgrade php-imapUpgrade php53Upgrade php-intlUpgrade php53-xmlUpgrade php-pspellUpgrade php-dbaUpgrade php-odbcUpgrade php-soapUpgrade php-tidyUpgrade php-commonUpgrade php-ldapUpgrade php53-odbcUpgrade php-recodeUpgrade php53-imapUpgrade php53-gdUpgrade php-xmlrpcUpgrade php-develUpgrade php53-commonUpgrade php-xmlUpgrade php-cliUpgrade php-snmpUpgrade php-mysqlUpgrade php-ztsUpgrade php-pdoUpgrade php53-mbstringUpgrade php53-soapUpgrade php-mbstringUpgrade php-bcmathUpgrade php53-processUpgrade php53-pdoUpgrade php53-devel | Oct 16, 2024 | May 11, 2012 |
| Php | — | Upgrade to PHP version 5.3.12Upgrade to PHP version 5.4.2 | Jul 17, 2012 | May 11, 2012 |
| Suse | — | Upgrade php5-debugsourceUpgrade php5-xmlreaderUpgrade php5-pharUpgrade php5-exifUpgrade php5-ftpUpgrade php5-exif-debuginfoUpgrade php5-socketsUpgrade php5-bz2Upgrade php53-xmlwriterUpgrade php53-readlineUpgrade php53-xmlreaderUpgrade php53-posixUpgrade php5-hashUpgrade php53-odbcUpgrade php53-mbstringUpgrade php5-opensslUpgrade php53-snmpUpgrade php5-wddx-debuginfoUpgrade php5-mhashUpgrade php5-xsl-debuginfoUpgrade php53-dbaUpgrade php5-pgsql-debuginfoUpgrade php53-sysvshmUpgrade php5Upgrade php5-ftp-debuginfoUpgrade php53-gettextUpgrade php5-fastcgiUpgrade php5-tidyUpgrade php5-xmlrpc-debuginfoUpgrade php53-iconvUpgrade php5-odbcUpgrade php53-zipUpgrade php5-snmpUpgrade php5-shmopUpgrade php53Upgrade php5-sysvsemUpgrade php5-pdoUpgrade php5-gettext-debuginfoUpgrade php5-ldap-debuginfoUpgrade php5-mysqlUpgrade php5-mcryptUpgrade php53-shmopUpgrade php53-gdUpgrade php5-mbstringUpgrade php5-openssl-debuginfoUpgrade php5-posix-debuginfoUpgrade php5-json-debuginfoUpgrade php53-calendarUpgrade php53-curlUpgrade php5-sysvshm-debuginfoUpgrade php5-readline-debuginfoUpgrade php53-pspellUpgrade php53-tidyUpgrade apache2-mod_php5-debuginfoUpgrade php5-xmlwriterUpgrade php5-debuginfoUpgrade php5-xmlreader-debuginfoUpgrade php53-fileinfoUpgrade php5-sysvmsgUpgrade php53-socketsUpgrade php5-xmlwriter-debuginfoUpgrade php5-zlib-debuginfoUpgrade php53-pcntlUpgrade php5-ncursesUpgrade php5-domUpgrade php5-soapUpgrade php5-sockets-debuginfoUpgrade php5-jsonUpgrade php5-enchant-debuginfoUpgrade php53-ctypeUpgrade php5-calendarUpgrade php5-mbstring-debuginfoUpgrade php5-sysvsem-debuginfoUpgrade php5-pearUpgrade php53-imapUpgrade php53-suhosinUpgrade php5-gmpUpgrade php5-calendar-debuginfoUpgrade php5-sysvmsg-debuginfoUpgrade php5-pdo-debuginfoUpgrade php53-pearUpgrade php5-iconvUpgrade php5-sqliteUpgrade php53-zlibUpgrade php53-pdoUpgrade php5-gd-debuginfoUpgrade php53-bcmathUpgrade php5-pspell-debuginfoUpgrade php5-bcmathUpgrade php53-domUpgrade php5-zip-debuginfoUpgrade php5-suhosinUpgrade php53-opensslUpgrade php5-sysvshmUpgrade php5-shmop-debuginfoUpgrade php5-imapUpgrade php5-zlibUpgrade php5-posixUpgrade php5-gdUpgrade php53-sqliteUpgrade php5-mysql-debuginfoUpgrade php5-dbaseUpgrade php5-readlineUpgrade php5-iconv-debuginfoUpgrade php53-sysvmsgUpgrade php5-phar-debuginfoUpgrade php5-bcmath-debuginfoUpgrade sle-sdk-releaseUpgrade php5-fileinfoUpgrade php5-fastcgi-debuginfoUpgrade php5-develUpgrade php5-ldapUpgrade php5-pspellUpgrade php5-gmp-debuginfoUpgrade php5-tokenizer-debuginfoUpgrade php5-fileinfo-debuginfoUpgrade php5-xmlrpcUpgrade php53-tokenizerUpgrade php5-dba-debuginfoUpgrade php5-ctype-debuginfoUpgrade php53-bz2Upgrade php53-intlUpgrade php53-fastcgiUpgrade php5-ctypeUpgrade php53-xmlrpcUpgrade php5-intl-debuginfoUpgrade php5-dom-debuginfoUpgrade php53-exifUpgrade php5-dbaUpgrade php5-mcrypt-debuginfoUpgrade php5-mssqlUpgrade php5-xslUpgrade php53-gmpUpgrade php5-curl-debuginfoUpgrade apache2-mod_php53Upgrade php5-curlUpgrade php53-ldapUpgrade php5-intlUpgrade php5-fpm-debuginfoUpgrade php5-pcntl-debuginfoUpgrade php53-develUpgrade php5-suhosin-debuginfoUpgrade php53-ftpUpgrade php53-sysvsemUpgrade php5-snmp-debuginfoUpgrade php53-pgsqlUpgrade php5-soap-debuginfoUpgrade php5-sqlite-debuginfoUpgrade php53-xslUpgrade php5-tokenizerUpgrade php5-mssql-debuginfoUpgrade php5-zipUpgrade apache2-mod_php5Upgrade php53-wddxUpgrade php5-pcntlUpgrade php53-mysqlUpgrade php5-imap-debuginfoUpgrade php5-gettextUpgrade php5-tidy-debuginfoUpgrade php5-wddxUpgrade php53-mcryptUpgrade php5-bz2-debuginfoUpgrade php5-fpmUpgrade php53-jsonUpgrade php5-pgsqlUpgrade php53-soapUpgrade php5-enchantUpgrade php5-odbc-debuginfo | Feb 17, 2015 | May 11, 2012 |
| Ubuntu | — | Upgrade php5-cgi | Nov 8, 2024 | May 11, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub