PHP 'sapi/apache2handler/sapi_apache2.c' Remote Code Execution Vulnerability

Bugtraq ID:	74204
Class:	Design Error
CVE:	CVE-2015-3330
Remote:	Yes
Local:	No
Published:	Apr 17 2015 12:00AM
Updated:	Jul 05 2016 09:28PM
Credit:	[email protected]
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 PHP PHP 5.4.3 PHP PHP 5.4.2 PHP PHP 5.4.1 Apple Mac Os X 10.7.4 Apple Mac Os X 10.7.3 Apple Mac Os X 10.7.1
Not Vulnerable:

PHP 'sapi/apache2handler/sapi_apache2.c' Remote Code Execution Vulnerability

PHP is prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.

PHP 'sapi/apache2handler/sapi_apache2.c' Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PHP 'sapi/apache2handler/sapi_apache2.c' Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

PHP 'sapi/apache2handler/sapi_apache2.c' Remote Code Execution Vulnerability

References:

• PHP Homepage (PHP)