Red Hat Security AdvisoryRHSA-2012:0568
php security update
Released 2012-05-10 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux EUS (v. 5.6 server) php-5.1.6-27.el5_6.4, php-5.1.6-27.el5_6.4.i386, php-5.1.6-27.el5_6.4.ia64 +47
- Red Hat Enterprise Linux Long Life (v. 5.3 server) php-5.1.6-23.3.el5_3, php-5.1.6-23.3.el5_3.i386, php-5.1.6-23.3.el5_3.ia64 +47
- Red Hat Enterprise Linux Server EUS (v. 6.0) php-5.3.2-6.el6_0.2, php-cli-5.3.2-6.el6_0.2, php-common-5.3.2-6.el6_0.2 +9
- Red Hat Enterprise Linux Server EUS (v. 6.1) php-5.3.3-3.el6_1.4, php-cli-5.3.3-3.el6_1.4, php-common-5.3.3-3.el6_1.4 +9
- Red Hat Enterprise Linux Server Optional EUS (v. 6.0) php-5.3.2-6.el6_0.2, php-bcmath-5.3.2-6.el6_0.2, php-dba-5.3.2-6.el6_0.2 +12
- Red Hat Enterprise Linux Server Optional EUS (v. 6.1) php-5.3.3-3.el6_1.4, php-bcmath-5.3.3-3.el6_1.4, php-dba-5.3.3-3.el6_1.4 +12
Fixes 1 record
Priority CRITICAL 100KEV
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99998 · Published 2012-05-11 · Fixed CWE-77
