sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | May 11, 2012 |
| Apple Osx Note | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Aug 28, 2015 | May 11, 2012 |
| Apple Osx Php | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Sep 27, 2012 | May 11, 2012 |
| Centos_linux | — | Upgrade php-imapUpgrade php-embeddedUpgrade php-gdUpgrade php53-commonUpgrade php53-xmlrpcUpgrade php-pspellUpgrade php-pdoUpgrade php53-develUpgrade php-xmlUpgrade php53-pdoUpgrade php-recodeUpgrade php-soapUpgrade php53-cliUpgrade php53-imapUpgrade php-tidyUpgrade php-xmlrpcUpgrade phpUpgrade php53-pspellUpgrade php-bcmathUpgrade php-snmpUpgrade php53-soapUpgrade php53-snmpUpgrade php53-intlUpgrade php-processUpgrade php53Upgrade php-enchantUpgrade php53-xmlUpgrade php53-gdUpgrade php-cliUpgrade php-dbaUpgrade php53-bcmathUpgrade php53-odbcUpgrade php53-pgsqlUpgrade php53-mbstringUpgrade php53-processUpgrade php-intlUpgrade php-commonUpgrade php-develUpgrade php53-mysqlUpgrade php-mbstringUpgrade php-ncursesUpgrade php-odbcUpgrade php-ztsUpgrade php-mysqlUpgrade php-ldapUpgrade php53-ldapUpgrade php-pgsqlUpgrade php53-dba | Dec 1, 2016 | May 11, 2012 |
| Freebsd | — | Upgrade php52Upgrade php53Upgrade php4Upgrade php5 | Dec 10, 2025 | May 12, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | May 11, 2012 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | May 11, 2012 |
| Hpux | — | Update hpuxws22APCH32.APACHE to the latest versionUpdate hpuxwsAPACHE.WEBPROXY to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP to the latest versionUpdate hpuxws22APACHE.WEBPROXY2 to the latest versionUpdate hpuxwsAPACHE.MOD_JK2 to the latest versionUpdate hpuxws22APACHE.PHP to the latest versionUpdate hpuxws22APACHE.PHP2 to the latest versionUpdate hpuxwsAPACHE.APACHE2 to the latest versionUpdate hpuxws22APCH32.APACHE2 to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP2 to the latest versionUpdate hpuxws22APACHE.APACHE to the latest versionUpdate hpuxwsAPACHE.MOD_JK to the latest versionUpdate hpuxwsAPACHE.AUTH_LDAP2 to the latest versionUpdate hpuxws22APACHE.AUTH_LDAP to the latest versionUpdate hpuxws22APACHE.WEBPROXY to the latest versionUpdate hpuxws22APCH32.WEBPROXY2 to the latest versionUpdate hpuxws22APCH32.MOD_PERL2 to the latest versionUpdate hpuxws22APACHE.APACHE2 to the latest versionUpdate hpuxws22APCH32.MOD_PERL to the latest versionUpdate hpuxws22APCH32.MOD_JK to the latest versionUpdate hpuxws22APCH32.PHP to the latest versionUpdate hpuxws22APCH32.PHP2 to the latest versionUpdate hpuxwsAPACHE.AUTH_LDAP to the latest versionUpdate hpuxws22APCH32.WEBPROXY to the latest versionUpdate hpuxws22APACHE.AUTH_LDAP2 to the latest versionUpdate hpuxws22APCH32.MOD_JK2 to the latest versionUpdate hpuxws22APACHE.MOD_PERL2 to the latest versionUpdate hpuxws22APACHE.MOD_JK2 to the latest versionUpdate hpuxwsAPACHE.PHP2 to the latest versionUpdate hpuxws22APACHE.MOD_PERL to the latest versionUpdate hpuxwsAPACHE.MOD_PERL to the latest versionUpdate hpuxwsAPACHE.MOD_PERL2 to the latest versionUpdate hpuxwsAPACHE.PHP to the latest versionUpdate hpuxws22APACHE.MOD_JK to the latest versionUpdate hpuxwsAPACHE.APACHE to the latest version | Aug 11, 2017 | May 11, 2012 |
| Oracle_linux | — | Upgrade php53-ldapUpgrade php-soapUpgrade php53-pspellUpgrade php-odbcUpgrade php53-intlUpgrade php-pgsqlUpgrade php-gdUpgrade php-enchantUpgrade php-intlUpgrade php-pspellUpgrade php53-bcmathUpgrade php53-dbaUpgrade php-ncursesUpgrade php-tidyUpgrade php53-xmlrpcUpgrade php53-snmpUpgrade php53-pgsqlUpgrade php-dbaUpgrade php53Upgrade php-imapUpgrade php53-xmlUpgrade php-embeddedUpgrade php53-cliUpgrade php53-mysqlUpgrade phpUpgrade php-processUpgrade php-mysqlUpgrade php53-mbstringUpgrade php-xmlUpgrade php53-develUpgrade php-bcmathUpgrade php53-gdUpgrade php-recodeUpgrade php53-odbcUpgrade php53-processUpgrade php53-pdoUpgrade php53-commonUpgrade php-ztsUpgrade php53-soapUpgrade php-develUpgrade php-ldapUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php53-imapUpgrade php-commonUpgrade php-snmpUpgrade php-cli | Oct 16, 2024 | May 11, 2012 |
| Php | — | Upgrade to PHP version 5.3.12Upgrade to PHP version 5.4.2 | Jul 17, 2012 | May 11, 2012 |
| Suse | — | Upgrade php53-gmpUpgrade php5-dbaseUpgrade php53-pgsqlUpgrade php53-develUpgrade php53-sysvsemUpgrade php5-wddxUpgrade php5-iconv-debuginfoUpgrade php5-readlineUpgrade php5-mcrypt-debuginfoUpgrade php5-intlUpgrade php5-suhosin-debuginfoUpgrade php53-ftpUpgrade php5-pcntl-debuginfoUpgrade php53-domUpgrade php5-bcmathUpgrade php5-sysvshmUpgrade php5-dba-debuginfoUpgrade php5-pspell-debuginfoUpgrade php5-suhosinUpgrade php53-bz2Upgrade php5-develUpgrade php5-pspellUpgrade php5-xslUpgrade php5-gettextUpgrade php53-fastcgiUpgrade php53-intlUpgrade php5-mssqlUpgrade php5-ctype-debuginfoUpgrade php53-mcryptUpgrade php5-fileinfo-debuginfoUpgrade php53-sysvmsgUpgrade php5-ctypeUpgrade php5-dbaUpgrade php5-dom-debuginfoUpgrade php5-phar-debuginfoUpgrade php53-bcmathUpgrade php5-odbc-debuginfoUpgrade php5-curlUpgrade php5-ldapUpgrade php53-exifUpgrade php5-zip-debuginfoUpgrade sle-sdk-releaseUpgrade php5-tokenizerUpgrade php5-fpm-debuginfoUpgrade php5-snmp-debuginfoUpgrade php5-gdUpgrade php5-enchantUpgrade php5-xmlrpcUpgrade php5-bz2-debuginfoUpgrade php5-fastcgi-debuginfoUpgrade php5-gmp-debuginfoUpgrade php53-ldapUpgrade php5-posixUpgrade php5-mssql-debuginfoUpgrade php53-jsonUpgrade php5-tokenizer-debuginfoUpgrade php5-mysql-debuginfoUpgrade php5-zlibUpgrade php53-opensslUpgrade php5-fpmUpgrade php53-soapUpgrade php5-imapUpgrade php53-xmlrpcUpgrade php5-curl-debuginfoUpgrade php5-fileinfoUpgrade php5-bcmath-debuginfoUpgrade php53-tokenizerUpgrade apache2-mod_php53Upgrade php53-xslUpgrade php53-sqliteUpgrade php5-shmop-debuginfoUpgrade php5-pgsqlUpgrade php5-zipUpgrade php5-pcntlUpgrade apache2-mod_php5Upgrade php53-mysqlUpgrade php53-wddxUpgrade php5-soap-debuginfoUpgrade php5-sqlite-debuginfoUpgrade php5-intl-debuginfoUpgrade php5-imap-debuginfoUpgrade php5-tidy-debuginfoUpgrade php53-tidyUpgrade php53-pspellUpgrade php5-ncursesUpgrade php5-hashUpgrade php5-xmlreaderUpgrade apache2-mod_php5-debuginfoUpgrade php5-bz2Upgrade php5-pearUpgrade php53-xmlreaderUpgrade php5-calendar-debuginfoUpgrade php5-pdo-debuginfoUpgrade php53-shmopUpgrade php5-mysqlUpgrade php5-gd-debuginfoUpgrade php5-tidyUpgrade php5-ftp-debuginfoUpgrade php5-calendarUpgrade php53-curlUpgrade php53-gdUpgrade php5-shmopUpgrade php5-sockets-debuginfoUpgrade php5-debugsourceUpgrade php5-mbstringUpgrade php5-gettext-debuginfoUpgrade php5-openssl-debuginfoUpgrade php5-mcryptUpgrade php53-readlineUpgrade php5-sysvmsgUpgrade php53-fileinfoUpgrade php5-xmlreader-debuginfoUpgrade php5-zlib-debuginfoUpgrade php5-jsonUpgrade php53Upgrade php5-exifUpgrade php5-socketsUpgrade php5-pdoUpgrade php53-snmpUpgrade php5Upgrade php5-mbstring-debuginfoUpgrade php53-gettextUpgrade php53-zlibUpgrade php5-odbcUpgrade php53-dbaUpgrade php5-sysvshm-debuginfoUpgrade php5-opensslUpgrade php5-ftpUpgrade php5-pharUpgrade php53-calendarUpgrade php53-pcntlUpgrade php53-pdoUpgrade php5-debuginfoUpgrade php5-xsl-debuginfoUpgrade php5-enchant-debuginfoUpgrade php53-odbcUpgrade php53-mbstringUpgrade php5-xmlrpc-debuginfoUpgrade php5-wddx-debuginfoUpgrade php53-suhosinUpgrade php5-snmpUpgrade php5-pgsql-debuginfoUpgrade php5-soapUpgrade php5-ldap-debuginfoUpgrade php5-readline-debuginfoUpgrade php5-xmlwriter-debuginfoUpgrade php5-sysvsem-debuginfoUpgrade php53-sysvshmUpgrade php53-pearUpgrade php5-iconvUpgrade php53-xmlwriterUpgrade php5-exif-debuginfoUpgrade php5-xmlwriterUpgrade php5-sysvsemUpgrade php53-iconvUpgrade php5-fastcgiUpgrade php53-zipUpgrade php5-gmpUpgrade php53-imapUpgrade php5-sysvmsg-debuginfoUpgrade php53-ctypeUpgrade php5-mhashUpgrade php5-domUpgrade php53-posixUpgrade php5-sqliteUpgrade php5-posix-debuginfoUpgrade php53-socketsUpgrade php5-json-debuginfo | Feb 17, 2015 | May 11, 2012 |
| Ubuntu | — | Upgrade php5-cgi | Nov 8, 2024 | May 11, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub