PHP CGI SAPI Code Execution Vulnerability
BID:6875
Info
PHP CGI SAPI Code Execution Vulnerability
| Bugtraq ID: | 6875 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 17 2003 12:00AM |
| Updated: | Feb 17 2003 12:00AM |
| Credit: | Discovery is credited to Kosmas Skiadopoulos. |
| Vulnerable: |
PHP PHP 4.3 |
| Not Vulnerable: |
PHP PHP 4.3.1 |
Discussion
PHP CGI SAPI Code Execution Vulnerability
The PHP CGI SAPI contains an unspecified bug that renders options for preventing direct access to the CGI binary useless. The configuratin option '--enable-force-cgi-redirect' and the php.ini option 'cgi.force_redirect' could be disabled by this bug, allowing an attacker to gain access to any file readable by the webserver user. Arbitrary PHP code could also be executed.
The PHP CGI SAPI contains an unspecified bug that renders options for preventing direct access to the CGI binary useless. The configuratin option '--enable-force-cgi-redirect' and the php.ini option 'cgi.force_redirect' could be disabled by this bug, allowing an attacker to gain access to any file readable by the webserver user. Arbitrary PHP code could also be executed.
Exploit / POC
PHP CGI SAPI Code Execution Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP CGI SAPI Code Execution Vulnerability
References:
References:
- PHP Security Advisory: CGI vulnerability in PHP version 4.3.0 (Jani Taskinen