Lucene search
RedhatCVELIST:CVE-2012-2336HistoryMay 11, 2012 - 10:00 a.m.
CVE-2012-2336
2012-05-1110:00:00
redhat
www.cve.org
12
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the βTβ case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
References
lists.opensuse.org/opensuse-security-announce/2012-06/msg00004.html
lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html
secunia.com/advisories/49014
www.php.net/archive/2012.php#id2012-05-08-1
www.php.net/ChangeLog-5.php#5.4.3
bugs.php.net/bug.php?id=61910
bugs.php.net/patch-display.php?bug_id=61910&patch=CVE-2012-1823.patch&revision=1336251592&display=1
h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
Related
prion
prion
Design/Logic Flaw
2012-05-11 10:15:00
Design/Logic Flaw
2012-05-11 10:15:00
Default configuration
2013-07-18 16:51:00
nvd
nvd
cve
cve
nessus
nessus
openSUSE Security Update : php5 (openSUSE-2012-288)
2014-06-13 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2012:068-1)
2012-05-07 00:00:00
PHP 5.3.x < 5.3.13 CGI Query String Code Execution
2012-05-09 00:00:00
exploitdb
exploitdb
PHP < 5.3.12 / < 5.4.2 - CGI Argument Injection
2012-05-05 00:00:00
Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution
2013-10-29 00:00:00
Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution + Scanner
2013-10-31 00:00:00
openvas
openvas
Mandriva Update for php MDVSA-2012:068-1 (php)
2012-08-03 00:00:00
Mandriva Update for php MDVSA-2012:068-1 (php)
2012-08-03 00:00:00
PHP < 5.3.13, 5.4.x < 5.4.3 Multiple Vulnerabilities - Active Check
2012-05-04 00:00:00
ubuntucve
ubuntucve
amazon
amazon
Critical: php
2012-05-09 14:54:00
thn
thn
Linux worm targeting Routers, Set-top boxes and Security Cameras with PHP-CGI Vulnerability
2013-11-30 09:08:00
Linux worm targeting Routers, Set-top boxes and Security Cameras with PHP-CGI Vulnerability
2013-11-30 20:08:00
Linux Worm targets Internet-enabled Home appliances to Mine Cryptocurrencies
2014-03-19 22:26:00
symantec
symantec
PHP 'php-cgi' Information Disclosure Vulnerability
2012-05-04 00:00:00
centos
centos
php security update
2012-05-07 21:09:19
php53 security update
2012-05-07 23:01:16
php security update
2012-06-27 20:21:47
cert
cert
Parallels Plesk Panel phppath/php vulnerability
2013-06-07 00:00:00
PHP-CGI query string parameter vulnerability
2012-05-03 00:00:00
saint
saint
PHP CGI Query String Parameters Command Execution
2012-05-15 00:00:00
PHP CGI Query String Parameters Command Execution
2012-05-15 00:00:00
PHP CGI Query String Parameters Command Execution
2012-05-15 00:00:00
checkpoint_advisories
checkpoint_advisories
exploitpack
exploitpack
PHP 5.3.12 5.4.2 - CGI Argument Injection
2012-05-05 00:00:00
Apache + PHP 5.3.12 5.4.2 - cgi-bin Remote Code Execution
2013-10-29 00:00:00
Plesk 9.5.4 - Remote Command Execution
2013-06-05 00:00:00
redhat
redhat
(RHSA-2012:0568) Critical: php security update
2012-05-10 00:00:00
(RHSA-2012:0569) Critical: php53 security update
2012-05-10 00:00:00
(RHSA-2012:0546) Critical: php security update
2012-05-07 00:00:00
threatpost
threatpost
Exploits for Two-Year-Old PHP Security Vulnerability Found
2014-03-19 12:12:20
U.S. Cyber Command Using Classified Intel To Scare CEOs To Action
2012-05-09 18:39:14
Leaders from China, U.S. Meet, Agree to Rally Against Cyber Threats
2012-05-08 17:24:22
packetstorm
packetstorm
PHP CGI Argument Injection
2012-05-22 00:00:00
PHP-CGI Argument Injection Remote Code Execution
2012-12-24 00:00:00
Apache + PHP 5.x Remote Code Execution Python Exploit #2
2013-10-31 00:00:00
freebsd
freebsd
php -- vulnerability in certain CGI-based setups
2012-05-03 00:00:00
zdt
zdt
PHP CGI Argument Injection
2012-05-05 00:00:00
Plesk Apache Zeroday Remote Exploit
2013-06-06 00:00:00
PHP CGI Argument Injection Remote Exploit (PHP Version)
2012-05-20 00:00:00
seebug
seebug
PHP CGI Argument Injection
2014-07-01 00:00:00
Apache / PHP 5.x Remote Code Execution Exploit
2013-10-31 00:00:00
PHP CGI Argument Injection Exploit
2014-07-01 00:00:00
cvelist
cvelist
metasploit
metasploit
PHP CGI Argument Injection
2012-05-09 16:01:15
cisa_kev
cisa_kev
PHP-CGI Query String Parameter Vulnerability
2022-03-25 00:00:00
PHP-CGI OS Command Injection Vulnerability
2024-06-12 00:00:00
attackerkb
attackerkb
CVE-2012-1823
2012-05-11 00:00:00
CVE-2013-4878
2013-07-18 00:00:00
oraclelinux
oraclelinux
php security update
2012-05-07 00:00:00
php53 security update
2012-05-07 00:00:00
securityvulns
securityvulns
PHP CGI Argument Injection Remote Exploit V0.3 - PHP Version
2012-05-24 00:00:00
PHP multiple security vulnerabilities
2012-05-24 00:00:00
nuclei
nuclei
PHP CGI v5.3.12/5.4.2 Remote Code Execution
2021-07-20 09:32:27
canvas
canvas
Immunity Canvas: PHP_CGI_REMOTE
2012-05-11 10:15:00
veracode
veracode
Arbitrary Code Execution
2019-01-15 08:51:10
Arbitrary Code Execution
2019-05-02 04:42:12
Denial Of Service (DoS) Or Directory Traversal
2019-05-02 04:42:12
suse
suse
Security update for PHP5 (important)
2012-06-09 01:08:41
update for php5 (critical)
2012-05-07 16:08:55
fedora
fedora
[SECURITY] Fedora 16 Update: maniadrive-1.2-32.fc16.5
2012-05-27 01:52:21
[SECURITY] Fedora 15 Update: php-5.3.13-1.fc15
2012-05-27 07:21:55
[SECURITY] Fedora 16 Update: php-5.3.13-1.fc16
2012-05-27 01:52:21
githubexploit
githubexploit
Exploit for OS Command Injection in Php
2024-06-11 15:11:56
Exploit for OS Command Injection in Php
2024-06-08 06:36:14
hackerone
hackerone
ubuntu
ubuntu
PHP vulnerability
2012-05-04 00:00:00