CVE-2012-2311
Summary
| CVE | CVE-2012-2311 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-05-11 10:15:48 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Php | Php | 5.4.2 | All | All | All |
| Application | Php | Php | 1.0 | All | All | All |
| Application | Php | Php | 2.0 | All | All | All |
| Application | Php | Php | 2.0b10 | All | All | All |
| Application | Php | Php | 3.0 | All | All | All |
| Application | Php | Php | 3.0.1 | All | All | All |
| Application | Php | Php | 3.0.10 | All | All | All |
| Application | Php | Php | 3.0.11 | All | All | All |
| Application | Php | Php | 3.0.12 | All | All | All |
| Application | Php | Php | 3.0.13 | All | All | All |
| Application | Php | Php | 3.0.14 | All | All | All |
| Application | Php | Php | 3.0.15 | All | All | All |
| Application | Php | Php | 3.0.16 | All | All | All |
| Application | Php | Php | 3.0.17 | All | All | All |
| Application | Php | Php | 3.0.18 | All | All | All |
| Application | Php | Php | 3.0.2 | All | All | All |
| Application | Php | Php | 3.0.3 | All | All | All |
| Application | Php | Php | 3.0.4 | All | All | All |
| Application | Php | Php | 3.0.5 | All | All | All |
| Application | Php | Php | 3.0.6 | All | All | All |
| Application | Php | Php | 3.0.7 | All | All | All |
| Application | Php | Php | 3.0.8 | All | All | All |
| Application | Php | Php | 3.0.9 | All | All | All |
| Application | Php | Php | 4.0 | beta1 | All | All |
| Application | Php | Php | 4.0 | beta2 | All | All |
| Application | Php | Php | 4.0 | beta3 | All | All |
| Application | Php | Php | 4.0 | beta4 | All | All |
| Application | Php | Php | 4.0 | beta_4_patch1 | All | All |
| Application | Php | Php | 4.0.0 | All | All | All |
| Application | Php | Php | 4.0.1 | All | All | All |
| Application | Php | Php | 4.0.2 | All | All | All |
| Application | Php | Php | 4.0.3 | All | All | All |
| Application | Php | Php | 4.0.4 | All | All | All |
| Application | Php | Php | 4.0.5 | All | All | All |
| Application | Php | Php | 4.0.6 | All | All | All |
| Application | Php | Php | 4.0.7 | All | All | All |
| Application | Php | Php | 4.1.0 | All | All | All |
| Application | Php | Php | 4.1.1 | All | All | All |
| Application | Php | Php | 4.1.2 | All | All | All |
| Application | Php | Php | 4.2.0 | All | All | All |
| Application | Php | Php | 4.2.1 | All | All | All |
| Application | Php | Php | 4.2.2 | All | All | All |
| Application | Php | Php | 4.2.3 | All | All | All |
| Application | Php | Php | 4.3.0 | All | All | All |
| Application | Php | Php | 4.3.1 | All | All | All |
| Application | Php | Php | 4.3.10 | All | All | All |
| Application | Php | Php | 4.3.11 | All | All | All |
| Application | Php | Php | 4.3.2 | All | All | All |
| Application | Php | Php | 4.3.3 | All | All | All |
| Application | Php | Php | 4.3.4 | All | All | All |
| Application | Php | Php | 4.3.5 | All | All | All |
| Application | Php | Php | 4.3.6 | All | All | All |
| Application | Php | Php | 4.3.7 | All | All | All |
| Application | Php | Php | 4.3.8 | All | All | All |
| Application | Php | Php | 4.3.9 | All | All | All |
| Application | Php | Php | 4.4.0 | All | All | All |
| Application | Php | Php | 4.4.1 | All | All | All |
| Application | Php | Php | 4.4.2 | All | All | All |
| Application | Php | Php | 4.4.3 | All | All | All |
| Application | Php | Php | 4.4.4 | All | All | All |
| Application | Php | Php | 4.4.5 | All | All | All |
| Application | Php | Php | 4.4.6 | All | All | All |
| Application | Php | Php | 4.4.7 | All | All | All |
| Application | Php | Php | 4.4.8 | All | All | All |
| Application | Php | Php | 4.4.9 | All | All | All |
| Application | Php | Php | 5.0.0 | All | All | All |
| Application | Php | Php | 5.0.0 | beta1 | All | All |
| Application | Php | Php | 5.0.0 | beta2 | All | All |
| Application | Php | Php | 5.0.0 | beta3 | All | All |
| Application | Php | Php | 5.0.0 | beta4 | All | All |
| Application | Php | Php | 5.0.0 | rc1 | All | All |
| Application | Php | Php | 5.0.0 | rc2 | All | All |
| Application | Php | Php | 5.0.0 | rc3 | All | All |
| Application | Php | Php | 5.0.1 | All | All | All |
| Application | Php | Php | 5.0.2 | All | All | All |
| Application | Php | Php | 5.0.3 | All | All | All |
| Application | Php | Php | 5.0.4 | All | All | All |
| Application | Php | Php | 5.0.5 | All | All | All |
| Application | Php | Php | 5.1.0 | All | All | All |
| Application | Php | Php | 5.1.1 | All | All | All |
| Application | Php | Php | 5.1.2 | All | All | All |
| Application | Php | Php | 5.1.3 | All | All | All |
| Application | Php | Php | 5.1.4 | All | All | All |
| Application | Php | Php | 5.1.5 | All | All | All |
| Application | Php | Php | 5.1.6 | All | All | All |
| Application | Php | Php | 5.2.0 | All | All | All |
| Application | Php | Php | 5.2.1 | All | All | All |
| Application | Php | Php | 5.2.10 | All | All | All |
| Application | Php | Php | 5.2.11 | All | All | All |
| Application | Php | Php | 5.2.12 | All | All | All |
| Application | Php | Php | 5.2.13 | All | All | All |
| Application | Php | Php | 5.2.14 | All | All | All |
| Application | Php | Php | 5.2.15 | All | All | All |
| Application | Php | Php | 5.2.16 | All | All | All |
| Application | Php | Php | 5.2.17 | All | All | All |
| Application | Php | Php | 5.2.2 | All | All | All |
| Application | Php | Php | 5.2.3 | All | All | All |
| Application | Php | Php | 5.2.4 | All | All | All |
| Application | Php | Php | 5.2.5 | All | All | All |
| Application | Php | Php | 5.2.6 | All | All | All |
| Application | Php | Php | 5.2.7 | All | All | All |
| Application | Php | Php | 5.2.8 | All | All | All |
| Application | Php | Php | 5.2.9 | All | All | All |
| Application | Php | Php | 5.3.0 | All | All | All |
| Application | Php | Php | 5.3.1 | All | All | All |
| Application | Php | Php | 5.3.10 | All | All | All |
| Application | Php | Php | 5.3.11 | All | All | All |
| Application | Php | Php | 5.3.2 | All | All | All |
| Application | Php | Php | 5.3.3 | All | All | All |
| Application | Php | Php | 5.3.4 | All | All | All |
| Application | Php | Php | 5.3.5 | All | All | All |
| Application | Php | Php | 5.3.6 | All | All | All |
| Application | Php | Php | 5.3.7 | All | All | All |
| Application | Php | Php | 5.3.8 | All | All | All |
| Application | Php | Php | 5.3.9 | All | All | All |
| Application | Php | Php | 5.4.0 | All | All | All |
| Application | Php | Php | 5.4.0 | beta2 | All | All |
| Application | Php | Php | 5.4.1 | All | All | All |
| Application | Php | Php | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| PHP :: Bug #61910 :: Patches | af854a3a-2127-422b-91ae-364da2661108 | bugs.php.net | |
| About Secunia Research | Flexera | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Security Alerts - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| DE EINDBAZEN » Eindbazen PHP-CGI advisory (CVE-2012-1823) | af854a3a-2127-422b-91ae-364da2661108 | eindbazen.net | |
| PHP: News Archive - 2012 | af854a3a-2127-422b-91ae-364da2661108 | www.php.net | |
| Debian -- Security Information -- DSA-2465-1 php5 | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| PHP :: Sec Bug #61910 :: VU#520827 - PHP-CGI query string parameter vulnerability | af854a3a-2127-422b-91ae-364da2661108 | bugs.php.net | Vendor Advisory |
| [security-announce] openSUSE-SU-2012:0590-1: critical: update for php5 | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| About the security content of OS X Mountain Lion v10.8.2, OS X Lion v10.7.5 and Security Update 2012-004 | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | |
| [security-announce] SUSE-SU-2012:0604-1: critical: Security update for P | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| '[security bulletin] HPSBUX02791 SSRT100856 rev.1 - HP-UX Apache Web Server running PHP, Remote Execu' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| PHP Command Parameter Bug Lets Remote Users Obtain Potentially Sensitive Information and Execute Arbitrary Code - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| [security-announce] SUSE-SU-2012:0598-1: critical: Security update for P | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Vulnerability Note VU#520827 - PHP-CGI query string parameter vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.kb.cert.org | US Government Resource |
| h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay | af854a3a-2127-422b-91ae-364da2661108 | h20564.www2.hp.com | |
| PHP: PHP 5 ChangeLog | af854a3a-2127-422b-91ae-364da2661108 | www.php.net | |
| APPLE-SA-2012-09-19-2 OS X Mountain Lion v10.8.2, OS X Lion v10.7.5 and Security Update 2012-004 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.