Lucene search
Ubuntu.comUB:CVE-2012-0830HistoryFeb 06, 2012 - 12:00 a.m.
CVE-2012-0830
2012-02-0600:00:00
ubuntu.com
ubuntu.com
14
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.879 High
EPSS
Percentile
98.6%
The php_register_variable_ex function in php_variables.c in PHP 5.3.9
allows remote attackers to execute arbitrary code via a request containing
a large number of variables, related to improper handling of array
variables. NOTE: this vulnerability exists because of an incorrect fix for
CVE-2011-4885.
Bugs
Notes
| Author | Note |
|---|---|
| tyhicks | Introduced by the fix for CVE-2011-4885 |
Related
openvas
openvas
Fedora Update for php FEDORA-2012-1301
2012-02-21 00:00:00
CentOS Update for php CESA-2012:0093 centos4
2012-07-30 00:00:00
Fedora Update for php FEDORA-2012-1262
2012-04-02 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: php-5.3.10-1.fc16
2012-02-08 22:56:30
[SECURITY] Fedora 16 Update: php-eaccelerator-0.9.6.1-9.fc16.2
2012-02-08 22:56:30
[SECURITY] Fedora 15 Update: php-eaccelerator-0.9.6.1-9.fc15.2
2012-02-14 09:05:18
nessus
nessus
Oracle Linux 5 : php53 (ELSA-2012-0092)
2013-07-12 00:00:00
PHP 5.3.9 'php_register_variable_ex()' Code Execution (intrusive check)
2012-02-20 00:00:00
CentOS 5 : php53 (CESA-2012:0092)
2012-02-03 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2020-04-10 01:10:12
Denial Of Service (DoS)
2020-04-10 01:06:05
cve
cve
CVE-2012-0830
2012-02-06 20:55:00
CVE-2011-4885
2011-12-30 01:55:00
amazon
amazon
Critical: php
2012-02-02 16:10:00
Medium: php
2012-01-19 20:10:00
redhat
redhat
(RHSA-2012:0092) Critical: php53 security update
2012-02-02 00:00:00
(RHSA-2012:0093) Critical: php security update
2012-02-02 00:00:00
(RHSA-2012:0019) Moderate: php53 and php security update
2012-01-11 00:00:00
centos
centos
php53 security update
2012-02-03 01:43:26
php security update
2012-02-03 01:41:17
php, php53 security update
2012-01-11 19:19:36
prion
prion
Design/Logic Flaw
2012-02-06 20:55:00
Code injection
2011-12-30 01:55:00
seebug
seebug
PHP "php_register_variable_ex()"ๅฝๆฐไปปๆไปฃ็ ๆง่กๆผๆด(CVE-2012-0830)
2012-02-03 00:00:00
PHP Hashtables Denial of Service
2014-07-01 00:00:00
PHP Web่กจๅๅๅธๅฒ็ชๆ็ปๆๅกๆผๆด
2012-01-01 00:00:00
securityvulns
securityvulns
PHP security vulnerabilities
2012-02-08 00:00:00
[ MDVSA-2012:065 ] php
2012-05-01 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP5 Hash Collision Denial Of Service - Ver2 (CVE-2011-4885)
2014-03-03 00:00:00
PHP php_register_variable_ex Function Code Execution (CVE-2012-0830)
2012-05-14 00:00:00
packetstorm
packetstorm
PHP 5.3.x Hashtables Proof Of Concept
2012-01-01 00:00:00
PHP 5.3.x Hash Collision Proof Of Concept Code
2012-01-02 00:00:00
f5
f5
K13588 : PHP vulnerability CVE-2011-4885
2013-09-11 00:00:00
SOL13588 - PHP vulnerability CVE-2011-4885
2012-05-17 00:00:00
K13519 : Multiple PHP vulnerabilities
2013-09-20 00:00:00
exploitpack
exploitpack
PHP 5.3.8 - Hashtables Denial of Service
2012-01-01 00:00:00
PHP Hash Table Collision - Denial of Service (PoC)
2012-01-03 00:00:00
ubuntucve
ubuntucve
CVE-2011-4885
2011-12-29 00:00:00
slackware
slackware
[slackware-security] php
2012-02-10 17:44:15
debian
debian
[SECURITY] [DSA 2403-1] php5 security update
2012-02-02 21:29:48
[SECURITY] [DSA 2403-2] php5 security update
2012-02-06 19:21:50
[SECURITY] [DSA 2399-1] php5 security update
2012-01-31 07:22:58
oraclelinux
oraclelinux
php security update
2012-02-02 00:00:00
php53 security update
2012-02-02 00:00:00
php53 and php security update
2012-01-11 00:00:00
freebsd
freebsd
php -- arbitrary remote code execution vulnerability
2012-02-02 00:00:00
php -- multiple vulnerabilities
2011-12-29 00:00:00
exploitdb
exploitdb
PHP 5.3.8 - Hashtables Denial of Service
2012-01-01 00:00:00
PHP Hash Table Collision - Denial of Service (PoC)
2012-01-03 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2012-02-10 00:00:00
PHP regression
2012-02-13 00:00:00
suse
suse
Security update for PHP5 (important)
2012-03-24 03:08:28
update for php5 (important)
2012-03-29 15:08:14
Security update for PHP5 (important)
2012-04-12 23:08:15
cert
cert
Hash table implementations vulnerable to algorithmic complexity attacks
2011-12-28 00:00:00
osv
osv
php5 - several
2012-01-31 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.879 High
EPSS
Percentile
98.6%
Related for UB:CVE-2012-0830