CVE-2012-1823

Executive Summary

Informations
Name	CVE-2012-1823	First vendor Publication	2012-05-11
Vendor	Cve	Last vendor Modification	2012-11-06

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1823

CWE : Common Weakness Enumeration

id	Name
CWE-20	Improper Input Validation

CPE : Common Platform Enumeration

Type	Description	Count
Application	Php Php cpe:/a:php:php:5.4.1 cpe:/a:php:php:5.4.0 cpe:/a:php:php:5.3.9 cpe:/a:php:php:5.3.8 cpe:/a:php:php:5.3.7 cpe:/a:php:php:5.3.6 cpe:/a:php:php:5.3.5 cpe:/a:php:php:5.3.4 cpe:/a:php:php:5.3.3 cpe:/a:php:php:5.3.2 cpe:/a:php:php:5.3.11 cpe:/a:php:php:5.3.10 cpe:/a:php:php:5.3.1 cpe:/a:php:php:5.3.0 cpe:/a:php:php:5.2.9 cpe:/a:php:php:5.2.8 cpe:/a:php:php:5.2.7 cpe:/a:php:php:5.2.6 cpe:/a:php:php:5.2.5 cpe:/a:php:php:5.2.4 cpe:/a:php:php:5.2.3 cpe:/a:php:php:5.2.2 cpe:/a:php:php:5.2.17 cpe:/a:php:php:5.2.16 cpe:/a:php:php:5.2.15 cpe:/a:php:php:5.2.14 cpe:/a:php:php:5.2.13 cpe:/a:php:php:5.2.12 cpe:/a:php:php:5.2.11 cpe:/a:php:php:5.2.10 cpe:/a:php:php:5.2.1 cpe:/a:php:php:5.2.0 cpe:/a:php:php:5.1.6 cpe:/a:php:php:5.1.5 cpe:/a:php:php:5.1.4 cpe:/a:php:php:5.1.3 cpe:/a:php:php:5.1.2 cpe:/a:php:php:5.1.1 cpe:/a:php:php:5.1.0 cpe:/a:php:php:5.0.5 cpe:/a:php:php:5.0.4 cpe:/a:php:php:5.0.3 cpe:/a:php:php:5.0.2 cpe:/a:php:php:5.0.1 cpe:/a:php:php:5.0.0:rc3 cpe:/a:php:php:5.0.0:beta1 cpe:/a:php:php:5.0.0:beta2 cpe:/a:php:php:5.0.0:beta3 cpe:/a:php:php:5.0.0:rc1 cpe:/a:php:php:5.0.0 cpe:/a:php:php:5.0.0:beta4 cpe:/a:php:php:5.0.0:rc2	52

SAINT Exploits

Description	Link
PHP CGI Query String Parameters Command Execution	More info here

ExploitDB Exploits

id	Description
2012-05-05	PHP CGI Argument Injection Exploit
2012-05-04	PHP CGI Argument Injection

Metasploit Database

id	Description
2012-05-03	PHP CGI Argument Injection

Internal Sources (Detail)

Source	Url
APPLE	http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
CERT-VN	http://www.kb.cert.org/vuls/id/520827
CONFIRM	http://support.apple.com/kb/HT5501 http://www.php.net/archive/2012.php#id2012-05-03-1 http://www.php.net/ChangeLog-5.php#5.4.2 https://bugs.php.net/bug.php?id=61910 https://bugs.php.net/patch-display.php?bug_id=61910&patch=cgi.diff&re...
HP	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 http://marc.info/?l=bugtraq&m=134012830914727&w=2 http://marc.info/?l=bugtraq&m=134012830914727&w=2
MISC	http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/
REDHAT	http://rhn.redhat.com/errata/RHSA-2012-0546.html http://rhn.redhat.com/errata/RHSA-2012-0547.html http://rhn.redhat.com/errata/RHSA-2012-0568.html
SECTRACK	http://www.securitytracker.com/id?1027022
SECUNIA	http://secunia.com/advisories/49014 http://secunia.com/advisories/49065 http://secunia.com/advisories/49085 http://secunia.com/advisories/49087

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-10 22:36:59	Multiple Updates
2013-05-01 17:22:42	Multiple Updates
2013-05-01 13:28:10	Multiple Updates
2013-05-01 09:22:50	Multiple Updates
2013-05-01 05:38:35	Multiple Updates

Type	Count
CPE ID(s)	52
Saint Exploit(s)	1
ExploitDB Exploit(s)	2
Metasploit Exploit(s)	1

Related	Severity
MDVSA-2012:071	(Critical)
HPSBMU02786 SSR...	(Critical)
GLSA-201209-03	(Critical)
VU#520827	(High)
USN-1437-1	(High)
RHSA-2012:1047	(High)
RHSA-2012:1046	(High)
RHSA-2012:1045	(High)
RHSA-2012:0570	(High)
RHSA-2012:0569	(High)
RHSA-2012:0568	(High)
RHSA-2012:0547	(High)
RHSA-2012:0546	(High)
MDVSA-2012:068-1	(High)
HPSBUX02791 SSR...	(High)
DSA-2465	(High)
CVE-2012-2335	(High)
CVE-2012-2311	(High)
CVE-2012-2336	(Medium)