CVE-2008-0599

Опубликовано: 05 мая 2008

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Средний

Описание

The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.

Ссылки

http://cvs.php.net/viewvc.cgi/php-src/sapi/cgi/cgi_main.c?r1=1.267.2.15.2.50.2.12&r2=1.267.2.15.2.50.2.13&diff_format=u
Broken Link
Exploit
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01476437
Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01476437
Broken Link
http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
Mailing List
http://marc.info/?l=bugtraq&m=124654546101607&w=2
Mailing List
http://marc.info/?l=bugtraq&m=124654546101607&w=2
Mailing List
http://marc.info/?l=bugtraq&m=125631037611762&w=2
Mailing List
http://marc.info/?l=bugtraq&m=125631037611762&w=2
Mailing List
http://secunia.com/advisories/30048
Broken Link
Vendor Advisory
http://secunia.com/advisories/30083
Broken Link
http://secunia.com/advisories/30345
Broken Link
Vendor Advisory
http://secunia.com/advisories/30616
Broken Link
http://secunia.com/advisories/30757
Broken Link
http://secunia.com/advisories/30828
Broken Link
http://secunia.com/advisories/31200
Broken Link
http://secunia.com/advisories/31326
Broken Link
http://secunia.com/advisories/32746
Broken Link
http://secunia.com/advisories/35650
Broken Link
http://security.gentoo.org/glsa/glsa-200811-05.xml
Third Party Advisory
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Версия до 5.2.6 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.5.4 (исключая)

cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*

Версия до 10.5.4 (исключая)

EPSS

Процентиль: 98%

0.51567

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-131

Связанные уязвимости

CVE-2008-0599

CVSS3: 9.8

ubuntu

около 17 лет назад

CVE-2008-0599

redhat

около 17 лет назад

CVE-2008-0599

CVSS3: 9.8

debian

около 17 лет назад

The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5. ...

GHSA-m9m5-q9x5-6877

CVSS3: 9.8

github

около 3 лет назад

EPSS

Процентиль: 98%

0.51567

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-131