Red Hat Security AdvisoryRHSA-2012:0546
php security update
Released 2012-05-07 · Red Hat rating Critical · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) php-5.1.6-34.el5_8, php-5.1.6-34.el5_8.i386, php-bcmath-5.1.6-34.el5_8 +35
- Red Hat Enterprise Linux (v. 5 server) php-5.1.6-34.el5_8, php-5.1.6-34.el5_8.i386, php-5.1.6-34.el5_8.ia64 +47
- Red Hat Enterprise Linux Desktop Optional (v. 6) php-5.3.3-3.el6_2.8, php-bcmath-5.3.3-3.el6_2.8, php-cli-5.3.3-3.el6_2.8 +23
- Red Hat Enterprise Linux HPC Node (v. 6) php-5.3.3-3.el6_2.8, php-cli-5.3.3-3.el6_2.8, php-common-5.3.3-3.el6_2.8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) php-5.3.3-3.el6_2.8, php-bcmath-5.3.3-3.el6_2.8, php-dba-5.3.3-3.el6_2.8 +21
- Red Hat Enterprise Linux Server (v. 6) php-5.3.3-3.el6_2.8, php-cli-5.3.3-3.el6_2.8, php-common-5.3.3-3.el6_2.8 +9
- Red Hat Enterprise Linux Server Optional (v. 6) php-5.3.3-3.el6_2.8, php-bcmath-5.3.3-3.el6_2.8, php-dba-5.3.3-3.el6_2.8 +12
- Red Hat Enterprise Linux Workstation (v. 6) php-5.3.3-3.el6_2.8, php-cli-5.3.3-3.el6_2.8, php-common-5.3.3-3.el6_2.8 +9
- Red Hat Enterprise Linux Workstation Optional (v. 6) php-5.3.3-3.el6_2.8, php-bcmath-5.3.3-3.el6_2.8, php-dba-5.3.3-3.el6_2.8 +12
Fixes 1 record
Priority CRITICAL 100KEV
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99998 · Published 2012-05-11 · Fixed CWE-77
