sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | May 11, 2012 |
| Apple Osx Note | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Aug 28, 2015 | May 11, 2012 |
| Apple Osx Php | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Sep 27, 2012 | May 11, 2012 |
| Centos_linux | — | Upgrade php-pgsqlUpgrade php-ldapUpgrade php53-ldapUpgrade php53-mbstringUpgrade php53-bcmathUpgrade php-mysqlUpgrade php-develUpgrade php53-mysqlUpgrade php-intlUpgrade php53-dbaUpgrade php53-processUpgrade php-odbcUpgrade php53-pgsqlUpgrade php53-odbcUpgrade php-ztsUpgrade php-mbstringUpgrade php-commonUpgrade php-ncursesUpgrade php53-xmlUpgrade php-gdUpgrade php-tidyUpgrade php53-cliUpgrade php53-imapUpgrade php-soapUpgrade php-xmlrpcUpgrade php53-develUpgrade php-imapUpgrade php-cliUpgrade php-enchantUpgrade php-pspellUpgrade php-dbaUpgrade php53-gdUpgrade php53-xmlrpcUpgrade php53-soapUpgrade php53-commonUpgrade php53-intlUpgrade php-pdoUpgrade php-bcmathUpgrade php53-pspellUpgrade php-snmpUpgrade php-xmlUpgrade phpUpgrade php-processUpgrade php53-pdoUpgrade php-embeddedUpgrade php53Upgrade php-recodeUpgrade php53-snmp | Dec 1, 2016 | May 11, 2012 |
| Freebsd | — | Upgrade php5Upgrade php4Upgrade php53Upgrade php52 | Dec 10, 2025 | May 12, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | May 11, 2012 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | May 11, 2012 |
| Hpux | — | Update hpuxwsAPACHE.PHP to the latest versionUpdate hpuxws22APACHE.MOD_JK2 to the latest versionUpdate hpuxws22APACHE.AUTH_LDAP2 to the latest versionUpdate hpuxwsAPACHE.MOD_PERL2 to the latest versionUpdate hpuxwsAPACHE.MOD_PERL to the latest versionUpdate hpuxws22APCH32.WEBPROXY to the latest versionUpdate hpuxws22APACHE.APACHE2 to the latest versionUpdate hpuxws22APCH32.MOD_JK2 to the latest versionUpdate hpuxwsAPACHE.AUTH_LDAP to the latest versionUpdate hpuxws22APCH32.PHP2 to the latest versionUpdate hpuxws22APACHE.MOD_PERL to the latest versionUpdate hpuxwsAPACHE.APACHE to the latest versionUpdate hpuxws22APACHE.MOD_JK to the latest versionUpdate hpuxws22APCH32.MOD_PERL2 to the latest versionUpdate hpuxws22APCH32.PHP to the latest versionUpdate hpuxws22APCH32.MOD_JK to the latest versionUpdate hpuxws22APCH32.WEBPROXY2 to the latest versionUpdate hpuxws22APACHE.MOD_PERL2 to the latest versionUpdate hpuxwsAPACHE.PHP2 to the latest versionUpdate hpuxws22APCH32.MOD_PERL to the latest versionUpdate hpuxws22APACHE.APACHE to the latest versionUpdate hpuxws22APCH32.APACHE to the latest versionUpdate hpuxwsAPACHE.AUTH_LDAP2 to the latest versionUpdate hpuxwsAPACHE.WEBPROXY to the latest versionUpdate hpuxwsAPACHE.MOD_JK to the latest versionUpdate hpuxws22APACHE.WEBPROXY2 to the latest versionUpdate hpuxws22APACHE.WEBPROXY to the latest versionUpdate hpuxws22APACHE.PHP2 to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP2 to the latest versionUpdate hpuxwsAPACHE.APACHE2 to the latest versionUpdate hpuxws22APCH32.APACHE2 to the latest versionUpdate hpuxws22APACHE.PHP to the latest versionUpdate hpuxwsAPACHE.MOD_JK2 to the latest versionUpdate hpuxws22APACHE.AUTH_LDAP to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP to the latest version | Aug 11, 2017 | May 11, 2012 |
| Oracle_linux | — | Upgrade php-recodeUpgrade php-mysqlUpgrade php53-imapUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-mbstringUpgrade php53-pdoUpgrade php53-develUpgrade php53-mbstringUpgrade php-xmlUpgrade php53-gdUpgrade php53-commonUpgrade php-ldapUpgrade php53-processUpgrade php-ztsUpgrade php53-odbcUpgrade php-bcmathUpgrade php-commonUpgrade php-snmpUpgrade php-cliUpgrade php-develUpgrade php53-soapUpgrade php-ncursesUpgrade php53Upgrade php-intlUpgrade php-soapUpgrade php53-xmlrpcUpgrade php53-mysqlUpgrade php53-intlUpgrade php53-snmpUpgrade php-imapUpgrade php53-dbaUpgrade php-enchantUpgrade php-processUpgrade php-odbcUpgrade php-tidyUpgrade php53-bcmathUpgrade phpUpgrade php53-cliUpgrade php-gdUpgrade php53-pgsqlUpgrade php-dbaUpgrade php53-pspellUpgrade php53-xmlUpgrade php-embeddedUpgrade php-pgsqlUpgrade php53-ldapUpgrade php-pspell | Oct 16, 2024 | May 11, 2012 |
| Php | — | Upgrade to PHP version 5.3.12Upgrade to PHP version 5.4.2 | Jul 17, 2012 | May 11, 2012 |
| Suse | — | Upgrade sle-sdk-releaseUpgrade php53-soapUpgrade php5-pgsqlUpgrade apache2-mod_php5Upgrade php5-ctypeUpgrade php5-phar-debuginfoUpgrade php5-readlineUpgrade php5-gmp-debuginfoUpgrade php53-opensslUpgrade php5-fastcgi-debuginfoUpgrade php5-fileinfo-debuginfoUpgrade php53-jsonUpgrade php5-tokenizer-debuginfoUpgrade php53-fastcgiUpgrade php5-zlibUpgrade php53-pgsqlUpgrade php5-xmlrpcUpgrade php5-fpmUpgrade php5-fpm-debuginfoUpgrade php53-sysvsemUpgrade php5-zipUpgrade php5-gdUpgrade php5-gettextUpgrade php5-sqlite-debuginfoUpgrade php5-mssql-debuginfoUpgrade php5-posixUpgrade php53-ftpUpgrade php53-xslUpgrade php5-zip-debuginfoUpgrade php53-domUpgrade php5-pcntl-debuginfoUpgrade php5-imapUpgrade php5-ctype-debuginfoUpgrade php5-sysvshmUpgrade php53-bz2Upgrade php5-tokenizerUpgrade php5-imap-debuginfoUpgrade php53-wddxUpgrade php5-fileinfoUpgrade php5-intlUpgrade php5-bcmathUpgrade php53-mysqlUpgrade php5-enchantUpgrade php53-bcmathUpgrade php5-pcntlUpgrade php5-develUpgrade php5-dbaUpgrade php53-tokenizerUpgrade php5-dba-debuginfoUpgrade apache2-mod_php53Upgrade php5-mssqlUpgrade php53-mcryptUpgrade php5-pspell-debuginfoUpgrade php5-wddxUpgrade php5-mysql-debuginfoUpgrade php5-suhosinUpgrade php5-curlUpgrade php53-sqliteUpgrade php53-sysvmsgUpgrade php53-exifUpgrade php5-odbc-debuginfoUpgrade php5-curl-debuginfoUpgrade php5-xslUpgrade php5-iconv-debuginfoUpgrade php5-bz2-debuginfoUpgrade php5-soap-debuginfoUpgrade php5-ldapUpgrade php53-intlUpgrade php53-gmpUpgrade php5-mcrypt-debuginfoUpgrade php5-suhosin-debuginfoUpgrade php5-dbaseUpgrade php5-bcmath-debuginfoUpgrade php53-develUpgrade php53-ldapUpgrade php5-shmop-debuginfoUpgrade php5-intl-debuginfoUpgrade php5-tidy-debuginfoUpgrade php53-xmlrpcUpgrade php5-snmp-debuginfoUpgrade php5-dom-debuginfoUpgrade php5-pspellUpgrade php5-zlib-debuginfoUpgrade php5-sockets-debuginfoUpgrade php53-iconvUpgrade php5-pharUpgrade php5-ftpUpgrade php5-odbcUpgrade php53-snmpUpgrade php5-calendarUpgrade php53-suhosinUpgrade php5-gmpUpgrade php5-gd-debuginfoUpgrade php5-wddx-debuginfoUpgrade php53-odbcUpgrade php5-tidyUpgrade php5-json-debuginfoUpgrade php5-fastcgiUpgrade php53-zipUpgrade php53-pdoUpgrade php53-mbstringUpgrade php53Upgrade php5-opensslUpgrade php5-ldap-debuginfoUpgrade php53-gdUpgrade php53-shmopUpgrade php5-calendar-debuginfoUpgrade php5-iconvUpgrade php53-pearUpgrade php53-xmlwriterUpgrade php5-mysqlUpgrade php5-exifUpgrade php5-readline-debuginfoUpgrade php5-xmlwriterUpgrade php5-pdo-debuginfoUpgrade php53-socketsUpgrade php5-sysvsem-debuginfoUpgrade php53-curlUpgrade php5-openssl-debuginfoUpgrade php5-sysvsemUpgrade php5-ftp-debuginfoUpgrade php5-pearUpgrade php5-xmlrpc-debuginfoUpgrade apache2-mod_php5-debuginfoUpgrade php53-pspellUpgrade php5-bz2Upgrade php5-snmpUpgrade php5-pgsql-debuginfoUpgrade php5-exif-debuginfoUpgrade php53-sysvshmUpgrade php5-debugsourceUpgrade php53-calendarUpgrade php53-posixUpgrade php5-posix-debuginfoUpgrade php5-gettext-debuginfoUpgrade php5-mbstringUpgrade php5-shmopUpgrade php5-ncursesUpgrade php5-hashUpgrade php53-xmlreaderUpgrade php5-mcryptUpgrade php53-readlineUpgrade php5-sqliteUpgrade php5-xmlwriter-debuginfoUpgrade php5-xsl-debuginfoUpgrade php5-soapUpgrade php5-debuginfoUpgrade php5-enchant-debuginfoUpgrade php53-ctypeUpgrade php5-jsonUpgrade php53-pcntlUpgrade php53-fileinfoUpgrade php5-mhashUpgrade php5-domUpgrade php5-sysvmsgUpgrade php5-xmlreader-debuginfoUpgrade php53-tidyUpgrade php5-sysvmsg-debuginfoUpgrade php5-xmlreaderUpgrade php53-imapUpgrade php53-dbaUpgrade php5-socketsUpgrade php5Upgrade php53-gettextUpgrade php53-zlibUpgrade php5-mbstring-debuginfoUpgrade php5-sysvshm-debuginfoUpgrade php5-pdo | Feb 17, 2015 | May 11, 2012 |
| Ubuntu | — | Upgrade php5-cgi | Nov 8, 2024 | May 11, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub