{"uuid": "52b0517b-aaf1-45c8-8334-11780f06b323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2329", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/php_apache_request_headers_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Vincent Danen\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack based buffer overflow in the CGI version of PHP\\n          5.4.x before 5.4.3. The vulnerability is due to the insecure handling of the\\n          HTTP headers.\\n\\n          This module has been tested against the thread safe version of PHP 5.4.2,\\n          from \\\"windows.php.net\\\", running with Apache 2.2.22 from \\\"apachelounge.com\\\".\", \"disclosure_date\": \"2012-05-08\", \"fullname\": \"exploit/windows/http/php_apache_request_headers_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"PHP apache_request_headers Function Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/php_apache_request_headers_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/http/php_apache_request_headers_bof\", \"references\": [\"CVE-2012-2329\", \"OSVDB-82215\", \"BID-53455\", \"URL-http://www.php.net/archive/2012.php#id2012-05-08-1\", \"URL-http://www.php.net/ChangeLog-5.php#5.4.3\", \"URL-https://bugzilla.redhat.com/show_bug.cgi?id=820000\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Windows XP SP3 / Windows 2003 Server SP2 (No DEP) / PHP 5.4.2 Thread safe\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:56.897447Z"}