CVE-2012-1823

Published: May 11, 2012Modified: Apr 21, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

Affected (30)

Products: Php: Php · Fedoraproject: Fedora · Debian: Debian Linux · +5 more

Show all products

1 product

1 product

1 product

1 product

1 product

2 products

Linux Enterprise Server

Linux Enterprise Software Development Kit

1 product

9 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Workstation

Gluster Storage Server For On Premise

Storage

Storage For Public Cloud

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Php Php	Before 5.3.12
Php Php	From 5.4.0 to 5.4.2

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 39
Fedoraproject Fedora	Version 40

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Hp Hp Ux	Version b.11.23
Hp Hp Ux	Version b.11.31

Configuration E

7 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.4
Opensuse Opensuse	Version 12.1
Suse Linux Enterprise Server	Version 10 sp4
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Software Development Kit	Version 10 sp4
Suse Linux Enterprise Software Development Kit	Version 11 sp2

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	From 10.6.8 to 10.7.5
Apple Mac Os X	From 10.8.0 to 10.8.2

Configuration G

14 vulnerable

Vulnerable Software	Affected Versions
Redhat Application Stack	Version 2.0
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Eus	Version 5.6
Redhat Enterprise Linux Eus	Version 6.1
Redhat Enterprise Linux Eus	Version 6.2
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server Aus	Version 5.3
Redhat Enterprise Linux Server Aus	Version 5.6
Redhat Enterprise Linux Workstation	Version 5.0
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Gluster Storage Server For On Premise	Version 2.0
Redhat Storage	Version 2.0
Redhat Storage For Public Cloud	Version 2.0

Related CWEs

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (60)

http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/

Source: cret@cert.org

Broken LinkExploit

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Source: cret@cert.org

Broken Link

http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html

Source: cret@cert.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00002.html

Source: cret@cert.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00007.html

Source: cret@cert.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00011.html

Source: cret@cert.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=134012830914727&w=2

Source: cret@cert.org

Mailing List

http://rhn.redhat.com/errata/RHSA-2012-0546.html

Source: cret@cert.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0547.html

Source: cret@cert.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0568.html

Source: cret@cert.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0569.html

Source: cret@cert.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0570.html

Source: cret@cert.org

Third Party Advisory

http://secunia.com/advisories/49014

Source: cret@cert.org

Broken Link

http://secunia.com/advisories/49065

Source: cret@cert.org

Broken Link

http://secunia.com/advisories/49085

Source: cret@cert.org

Broken Link

http://secunia.com/advisories/49087

Source: cret@cert.org

Broken Link

http://support.apple.com/kb/HT5501

Source: cret@cert.org

Third Party Advisory

http://www.debian.org/security/2012/dsa-2465

Source: cret@cert.org

Third Party Advisory

http://www.kb.cert.org/vuls/id/520827

Source: cret@cert.org

ExploitThird Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/673343

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2012:068

Source: cret@cert.org

Broken Link

http://www.openwall.com/lists/oss-security/2024/06/07/1

Source: cret@cert.org

Mailing List

http://www.php.net/ChangeLog-5.php#5.4.2

Source: cret@cert.org

ExploitPatchRelease Notes

http://www.php.net/archive/2012.php#id2012-05-03-1

Source: cret@cert.org

Release Notes

http://www.securitytracker.com/id?1027022

Source: cret@cert.org

Broken LinkThird Party AdvisoryVDB Entry

https://bugs.php.net/bug.php?id=61910

Source: cret@cert.org

ExploitPatch

https://bugs.php.net/patch-display.php?bug_id=61910&patch=cgi.diff&revision=1335984315&display=1

Source: cret@cert.org

Patch

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/

Source: cret@cert.org

Mailing ListRelease Notes

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/

Source: cret@cert.org

Mailing ListRelease Notes

http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/