CVE-2012-1823

Katalog CVE

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 100,0%

Kerentanan Improper Neutralization of Special Elements used in a Command ('Command Injection') pada php, fedoraproject fedora +15 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut CISA ADP. Masuk katalog KEV CISA pada 25 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

Rincian

Terbit di NVD

11 Mei 2012

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

EPSS (30 hari)

100,0% peluang dieksploitasi; lebih tinggi dari 99,9% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

PHP-CGI Query String Parameter Vulnerability

Masuk KEV

25 Maret 2022

Tenggat CISA

15 April 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.php.net/ChangeLog-5.php#5.4.2 exploit · patch · release notes
• https://bugs.php.net/bug.php?id=61910 exploit · patch
• https://bugs.php.net/patch-display.php?bug_id=61910&patch=cgi.diff&revision=1335984315&display=1 patch
• http://www.kb.cert.org/vuls/id/520827 exploit · advisory pihak ketiga · pemerintah AS
• http://www.kb.cert.org/vuls/id/673343 advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1823 pemerintah AS
• http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00002.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00007.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00011.html mailing list · advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2012-0546.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2012-0547.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2012-0568.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2012-0569.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2012-0570.html advisory pihak ketiga
• http://support.apple.com/kb/HT5501 advisory pihak ketiga
• http://www.debian.org/security/2012/dsa-2465 advisory pihak ketiga
• http://www.securitytracker.com/id?1027022 broken link · advisory pihak ketiga · vdb entry
• http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ broken link · exploit
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 broken link
• http://marc.info/?l=bugtraq&m=134012830914727&w=2 mailing list
• http://secunia.com/advisories/49014 broken link
• http://secunia.com/advisories/49065 broken link
• http://secunia.com/advisories/49085 broken link
• http://secunia.com/advisories/49087 broken link