var-201205-0305
Vulnerability from variot
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case. PHP is prone to an information-disclosure vulnerability. Exploiting this issue allows remote attackers to view the source code of files in the context of the server process. This may allow the attacker to obtain sensitive information and to run arbitrary PHP code on the affected computer; other attacks are also possible. ----------------------------------------------------------------------
Become a PSI 3.0 beta tester! Test-drive the new beta version and tell us what you think about its extended automatic update function and significantly enhanced user-interface. Download it here! http://secunia.com/psi_30_beta_launch
TITLE: Ubuntu update for php
SECUNIA ADVISORY ID: SA49097
VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/49097/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=49097
RELEASE DATE: 2012-05-07
DISCUSS ADVISORY: http://secunia.com/advisories/49097/#comments
AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)
http://secunia.com/advisories/49097/
ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS
https://ca.secunia.com/?page=viewadvisory&vuln_id=49097
ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING
http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
DESCRIPTION: Ubuntu has issued an update for php. This fixes a vulnerability, which can be exploited by malicious people to disclose certain sensitive information or compromise a vulnerable system.
For more information: SA49014
SOLUTION: Apply updated packages.
Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
ORIGINAL ADVISORY: USN-1437-1: http://www.ubuntu.com/usn/usn-1437-1/
OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
. HP System Management Homepage (SMH) before v7.1.1 running on Linux and Windows. HP System Management Homepage v7.1.1 is available here:
HP System Management Homepage for Windows x64
[Download here] or enter the following URL into the browser address window.
http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdDetail s/?sp4ts.oid=4091409&spf_p.tpst=psiSwdMain&spf_p.prp_psiSwdMain=wsrp-navigati onalState%3Dlang%253Den%257Ccc%253DUS%257CprodSeriesId%253D4091408%257CprodNa meId%253D4091409%257CswEnvOID%253D4064%257CswLang%253D8%257CswItem%253DMTX-ab 0d4e9bb4654a8da503eccfd9%257Cmode%253D3%257Caction%253DdriverDocument&javax.p ortlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vign ette.cachetoken
HP System Management Homepage for Windows x86
[Download here] or enter the following URL into the browser address window.
http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdDetail s/?sp4ts.oid=4091409&spf_p.tpst=psiSwdMain&spf_p.prp_psiSwdMain=wsrp-navigati onalState%3Dlang%253Den%257Ccc%253DUS%257CprodSeriesId%253D4091408%257CprodNa meId%253D4091409%257CswEnvOID%253D4022%257CswLang%253D8%257CswItem%253DMTX-f7 c0d15d28474255bd0ec23136%257Cmode%253D3%257Caction%253DdriverDocument&javax.p ortlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vign ette.cachetoken
HP System Management Homepage for Linux (AMD64/EM64T)
[Download here] or enter the following URL into the browser address window.
http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdDetail s/?sp4ts.oid=4091409&spf_p.tpst=psiSwdMain&spf_p.prp_psiSwdMain=wsrp-navigati onalState%3Dlang%253Den%257Ccc%253DUS%257CprodSeriesId%253D4091408%257CprodNa meId%253D4091409%257CswEnvOID%253D4035%257CswLang%253D8%257CswItem%253DMTX-18 d373dd1361400fbaca892942%257Cmode%253D3%257Caction%253DdriverDocument&javax.p ortlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vign ette.cachetoken
HP System Management Homepage for Linux (x86)
[Download here] or enter the following URL into the browser address window.
Additionally, this update fixes insufficient validation of upload name which lead to corrupted $_FILES indices.
For the stable distribution (squeeze), this problem has been fixed in version 5.3.3-7+squeeze9.
The testing distribution (wheezy) will be fixed soon.
For the unstable distribution (sid), this problem has been fixed in version 5.4.3-1.
We recommend that you upgrade your php5 packages. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emr_na-c03368475
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c03368475 Version: 1
HPSBUX02791 SSRT100856 rev.1 - HP-UX Apache Web Server running PHP, Remote Execution of Arbitrary Code, Privilege Elevation, Denial of Service (DoS)
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2012-06-14 Last Updated: 2012-06-14
Potential Security Impact: Remote execution of arbitrary code, privilege elevation, or Denial of Service (DoS).
Source: Hewlett-Packard Company, HP Software Security Response Team
VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with HP-UX Apache Web Server running PHP. These vulnerabilities could be exploited remotely to execute arbitrary code, elevate privileges, or create a Denial of Service (DoS).
References: CVE-2011-4153, CVE-2012-0830, CVE-2012-0883, CVE-2012-1172, CVE-2012-1823, CVE-2012-2311
SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. HP-UX B.11.23, B.11.31 running HP-UX Apache Web Server Suite v3.24 or earlier
BACKGROUND For a PGP signed
CVSS 2.0 Base Metrics
Reference Base Vector Base Score CVE-2011-4153 (AV:N/AC:L/Au:N/C:N/I:N/A:P) 5.0 CVE-2012-0830 (AV:N/AC:L/Au:N/C:P/I:P/A:P) 7.5 CVE-2012-0883 (AV:L/AC:M/Au:N/C:C/I:C/A:C) 6.9 CVE-2012-1172 (AV:N/AC:M/Au:N/C:N/I:P/A:P) 5.8 CVE-2012-1823 (AV:N/AC:L/Au:N/C:P/I:P/A:P) 7.5 CVE-2012-2311 (AV:N/AC:L/Au:N/C:P/I:P/A:P) 7.5 =========================================================== Information on CVSS is documented in HP Customer Notice: HPSN-2008-002
RESOLUTION
HP has provided the following software updates to resolve the vulnerabilities. The updates are available for download from http://software.hp.com
HP-UX Web Server Suite v.3.24 containing Apache v2.2.15.13 and PHP v5.2.17 HP-UX 11i Release Apache Depot name
B.11.23 (32-bit) HPUXWS22ATW-B324-32
B.11.23 (64-bit) HPUXWS22ATW-B324-64
B.11.31 (32-bit) HPUXWS22ATW-B324-32
B.11.31 (64-bit) HPUXWS22ATW-B324-64
MANUAL ACTIONS: Yes - Update Install HP-UX Web Server Suite v3.24 or subsequent.
PRODUCT SPECIFIC INFORMATION
HP-UX Software Assistant: HP-UX Software Assistant is an enhanced application that replaces HP-UX Security Patch Check. It analyzes all Security Bulletins issued by HP and lists recommended actions that may apply to a specific HP-UX system. It can also download patches and create a depot automatically. For more information see https://www.hp.com/go/swa
The following text is for use by the HP-UX Software Assistant. HP-UX Web Server Suite v3.24 AFFECTED VERSIONS
HP-UX B.11.23
hpuxws22APCH32.APACHE hpuxws22APCH32.APACHE2 hpuxws22APCH32.AUTH_LDAP hpuxws22APCH32.AUTH_LDAP2 hpuxws22APCH32.MOD_JK hpuxws22APCH32.MOD_JK2 hpuxws22APCH32.MOD_PERL hpuxws22APCH32.MOD_PERL2 hpuxws22APCH32.PHP hpuxws22APCH32.PHP2 hpuxws22APCH32.WEBPROXY hpuxws22APCH32.WEBPROXY2 hpuxws22APACHE.APACHE hpuxws22APACHE.APACHE2 hpuxws22APACHE.AUTH_LDAP hpuxws22APACHE.AUTH_LDAP2 hpuxws22APACHE.MOD_JK hpuxws22APACHE.MOD_JK2 hpuxws22APACHE.MOD_PERL hpuxws22APACHE.MOD_PERL2 hpuxws22APACHE.PHP hpuxws22APACHE.PHP2 hpuxws22APACHE.WEBPROXY hpuxws22APACHE.WEBPROXY2 action: install revision B.2.2.15.13 or subsequent
HP-UX B.11.31
hpuxws22APCH32.APACHE hpuxws22APCH32.APACHE2 hpuxws22APCH32.AUTH_LDAP hpuxws22APCH32.AUTH_LDAP2 hpuxws22APCH32.MOD_JK hpuxws22APCH32.MOD_JK2 hpuxws22APCH32.MOD_PERL hpuxws22APCH32.MOD_PERL2 hpuxws22APCH32.PHP hpuxws22APCH32.PHP2 hpuxws22APCH32.WEBPROXY hpuxws22APCH32.WEBPROXY2 hpuxws22APACHE.APACHE hpuxws22APACHE.APACHE2 hpuxws22APACHE.AUTH_LDAP hpuxws22APACHE.AUTH_LDAP2 hpuxws22APACHE.MOD_JK hpuxws22APACHE.MOD_JK2 hpuxws22APACHE.MOD_PERL hpuxws22APACHE.MOD_PERL2 hpuxws22APACHE.PHP hpuxws22APACHE.PHP2 hpuxws22APACHE.WEBPROXY hpuxws22APACHE.WEBPROXY2
action: install revision B.2.2.15.13 or subsequent
END AFFECTED VERSIONS
HISTORY Version:1 (rev.1) - 14 June 2012 Initial release
Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.
Support: For issues about implementing the recommendations of this Security Bulletin, contact normal HP Services support channel. For other issues about the content of this Security Bulletin, send e-mail to security-alert@hp.com.
Report: To report a potential security vulnerability with any HP supported product, send Email to: security-alert@hp.com
Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via Email: http://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins
Security Bulletin List: A list of HP Security Bulletins, updated periodically, is contained in HP Security Notice HPSN-2011-001: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emr_na-c02964430
Security Bulletin Archive: A list of recently released Security Bulletins is available here: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/
Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.
3C = 3COM 3P = 3rd Party Software GN = HP General Software HF = HP Hardware and Firmware MP = MPE/iX MU = Multi-Platform Software NS = NonStop Servers OV = OpenVMS PI = Printing and Imaging PV = ProCurve ST = Storage Software TU = Tru64 UNIX UX = HP-UX
Copyright 2012 Hewlett-Packard Development Company, L.P. Hewlett-Packard Company shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental,special or consequential damages including downtime cost; lost profits;damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett-Packard Company and the names of Hewlett-Packard products referenced herein are trademarks of Hewlett-Packard Company in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners. Relevant releases/architectures:
RHEL Desktop Workstation (v. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
===================================================================== Red Hat Security Advisory
Synopsis: Critical: php security update Advisory ID: RHSA-2012:0568-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2012-0568.html Issue date: 2012-05-10 CVE Names: CVE-2012-1823 =====================================================================
- Summary:
Updated php packages that fix one security issue are now available for Red Hat Enterprise Linux 5.3 Long Life, and Red Hat Enterprise Linux 5.6, 6.0 and 6.1 Extended Update Support.
The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux EUS (v. 5.6 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Long Life (v. 5.3 server) - i386, ia64, x86_64 Red Hat Enterprise Linux Server EUS (v. 6.0) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server EUS (v. 6.1) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional EUS (v. 6.0) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional EUS (v. 6.1) - i386, ppc64, s390x, x86_64
- Description:
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.
A flaw was found in the way the php-cgi executable processed command line arguments when running in CGI mode. This could lead to the disclosure of the script's source code or arbitrary code execution with the privileges of the PHP interpreter. (CVE-2012-1823)
Red Hat is aware that a public exploit for this issue is available that allows remote code execution in affected PHP CGI configurations. This flaw does not affect the default configuration in Red Hat Enterprise Linux 5 and 6 using the PHP module for Apache httpd to handle PHP scripts.
All php users should upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.
- Solution:
Before applying this update, make sure all previously-released errata relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
- Bugs fixed (http://bugzilla.redhat.com/):
818607 - CVE-2012-1823 php: command line arguments injection when run in CGI mode (VU#520827)
- Package List:
Red Hat Enterprise Linux Long Life (v. 5.3 server):
Source: php-5.1.6-23.3.el5_3.src.rpm
i386: php-5.1.6-23.3.el5_3.i386.rpm php-bcmath-5.1.6-23.3.el5_3.i386.rpm php-cli-5.1.6-23.3.el5_3.i386.rpm php-common-5.1.6-23.3.el5_3.i386.rpm php-dba-5.1.6-23.3.el5_3.i386.rpm php-debuginfo-5.1.6-23.3.el5_3.i386.rpm php-devel-5.1.6-23.3.el5_3.i386.rpm php-gd-5.1.6-23.3.el5_3.i386.rpm php-imap-5.1.6-23.3.el5_3.i386.rpm php-ldap-5.1.6-23.3.el5_3.i386.rpm php-mbstring-5.1.6-23.3.el5_3.i386.rpm php-mysql-5.1.6-23.3.el5_3.i386.rpm php-ncurses-5.1.6-23.3.el5_3.i386.rpm php-odbc-5.1.6-23.3.el5_3.i386.rpm php-pdo-5.1.6-23.3.el5_3.i386.rpm php-pgsql-5.1.6-23.3.el5_3.i386.rpm php-snmp-5.1.6-23.3.el5_3.i386.rpm php-soap-5.1.6-23.3.el5_3.i386.rpm php-xml-5.1.6-23.3.el5_3.i386.rpm php-xmlrpc-5.1.6-23.3.el5_3.i386.rpm
ia64: php-5.1.6-23.3.el5_3.ia64.rpm php-bcmath-5.1.6-23.3.el5_3.ia64.rpm php-cli-5.1.6-23.3.el5_3.ia64.rpm php-common-5.1.6-23.3.el5_3.ia64.rpm php-dba-5.1.6-23.3.el5_3.ia64.rpm php-debuginfo-5.1.6-23.3.el5_3.ia64.rpm php-devel-5.1.6-23.3.el5_3.ia64.rpm php-gd-5.1.6-23.3.el5_3.ia64.rpm php-imap-5.1.6-23.3.el5_3.ia64.rpm php-ldap-5.1.6-23.3.el5_3.ia64.rpm php-mbstring-5.1.6-23.3.el5_3.ia64.rpm php-mysql-5.1.6-23.3.el5_3.ia64.rpm php-ncurses-5.1.6-23.3.el5_3.ia64.rpm php-odbc-5.1.6-23.3.el5_3.ia64.rpm php-pdo-5.1.6-23.3.el5_3.ia64.rpm php-pgsql-5.1.6-23.3.el5_3.ia64.rpm php-snmp-5.1.6-23.3.el5_3.ia64.rpm php-soap-5.1.6-23.3.el5_3.ia64.rpm php-xml-5.1.6-23.3.el5_3.ia64.rpm php-xmlrpc-5.1.6-23.3.el5_3.ia64.rpm
x86_64: php-5.1.6-23.3.el5_3.x86_64.rpm php-bcmath-5.1.6-23.3.el5_3.x86_64.rpm php-cli-5.1.6-23.3.el5_3.x86_64.rpm php-common-5.1.6-23.3.el5_3.x86_64.rpm php-dba-5.1.6-23.3.el5_3.x86_64.rpm php-debuginfo-5.1.6-23.3.el5_3.x86_64.rpm php-devel-5.1.6-23.3.el5_3.x86_64.rpm php-gd-5.1.6-23.3.el5_3.x86_64.rpm php-imap-5.1.6-23.3.el5_3.x86_64.rpm php-ldap-5.1.6-23.3.el5_3.x86_64.rpm php-mbstring-5.1.6-23.3.el5_3.x86_64.rpm php-mysql-5.1.6-23.3.el5_3.x86_64.rpm php-ncurses-5.1.6-23.3.el5_3.x86_64.rpm php-odbc-5.1.6-23.3.el5_3.x86_64.rpm php-pdo-5.1.6-23.3.el5_3.x86_64.rpm php-pgsql-5.1.6-23.3.el5_3.x86_64.rpm php-snmp-5.1.6-23.3.el5_3.x86_64.rpm php-soap-5.1.6-23.3.el5_3.x86_64.rpm php-xml-5.1.6-23.3.el5_3.x86_64.rpm php-xmlrpc-5.1.6-23.3.el5_3.x86_64.rpm
Red Hat Enterprise Linux EUS (v. 5.6 server):
Source: php-5.1.6-27.el5_6.4.src.rpm
i386: php-5.1.6-27.el5_6.4.i386.rpm php-bcmath-5.1.6-27.el5_6.4.i386.rpm php-cli-5.1.6-27.el5_6.4.i386.rpm php-common-5.1.6-27.el5_6.4.i386.rpm php-dba-5.1.6-27.el5_6.4.i386.rpm php-debuginfo-5.1.6-27.el5_6.4.i386.rpm php-devel-5.1.6-27.el5_6.4.i386.rpm php-gd-5.1.6-27.el5_6.4.i386.rpm php-imap-5.1.6-27.el5_6.4.i386.rpm php-ldap-5.1.6-27.el5_6.4.i386.rpm php-mbstring-5.1.6-27.el5_6.4.i386.rpm php-mysql-5.1.6-27.el5_6.4.i386.rpm php-ncurses-5.1.6-27.el5_6.4.i386.rpm php-odbc-5.1.6-27.el5_6.4.i386.rpm php-pdo-5.1.6-27.el5_6.4.i386.rpm php-pgsql-5.1.6-27.el5_6.4.i386.rpm php-snmp-5.1.6-27.el5_6.4.i386.rpm php-soap-5.1.6-27.el5_6.4.i386.rpm php-xml-5.1.6-27.el5_6.4.i386.rpm php-xmlrpc-5.1.6-27.el5_6.4.i386.rpm
ia64: php-5.1.6-27.el5_6.4.ia64.rpm php-bcmath-5.1.6-27.el5_6.4.ia64.rpm php-cli-5.1.6-27.el5_6.4.ia64.rpm php-common-5.1.6-27.el5_6.4.ia64.rpm php-dba-5.1.6-27.el5_6.4.ia64.rpm php-debuginfo-5.1.6-27.el5_6.4.ia64.rpm php-devel-5.1.6-27.el5_6.4.ia64.rpm php-gd-5.1.6-27.el5_6.4.ia64.rpm php-imap-5.1.6-27.el5_6.4.ia64.rpm php-ldap-5.1.6-27.el5_6.4.ia64.rpm php-mbstring-5.1.6-27.el5_6.4.ia64.rpm php-mysql-5.1.6-27.el5_6.4.ia64.rpm php-ncurses-5.1.6-27.el5_6.4.ia64.rpm php-odbc-5.1.6-27.el5_6.4.ia64.rpm php-pdo-5.1.6-27.el5_6.4.ia64.rpm php-pgsql-5.1.6-27.el5_6.4.ia64.rpm php-snmp-5.1.6-27.el5_6.4.ia64.rpm php-soap-5.1.6-27.el5_6.4.ia64.rpm php-xml-5.1.6-27.el5_6.4.ia64.rpm php-xmlrpc-5.1.6-27.el5_6.4.ia64.rpm
ppc: php-5.1.6-27.el5_6.4.ppc.rpm php-bcmath-5.1.6-27.el5_6.4.ppc.rpm php-cli-5.1.6-27.el5_6.4.ppc.rpm php-common-5.1.6-27.el5_6.4.ppc.rpm php-dba-5.1.6-27.el5_6.4.ppc.rpm php-debuginfo-5.1.6-27.el5_6.4.ppc.rpm php-devel-5.1.6-27.el5_6.4.ppc.rpm php-gd-5.1.6-27.el5_6.4.ppc.rpm php-imap-5.1.6-27.el5_6.4.ppc.rpm php-ldap-5.1.6-27.el5_6.4.ppc.rpm php-mbstring-5.1.6-27.el5_6.4.ppc.rpm php-mysql-5.1.6-27.el5_6.4.ppc.rpm php-ncurses-5.1.6-27.el5_6.4.ppc.rpm php-odbc-5.1.6-27.el5_6.4.ppc.rpm php-pdo-5.1.6-27.el5_6.4.ppc.rpm php-pgsql-5.1.6-27.el5_6.4.ppc.rpm php-snmp-5.1.6-27.el5_6.4.ppc.rpm php-soap-5.1.6-27.el5_6.4.ppc.rpm php-xml-5.1.6-27.el5_6.4.ppc.rpm php-xmlrpc-5.1.6-27.el5_6.4.ppc.rpm
s390x: php-5.1.6-27.el5_6.4.s390x.rpm php-bcmath-5.1.6-27.el5_6.4.s390x.rpm php-cli-5.1.6-27.el5_6.4.s390x.rpm php-common-5.1.6-27.el5_6.4.s390x.rpm php-dba-5.1.6-27.el5_6.4.s390x.rpm php-debuginfo-5.1.6-27.el5_6.4.s390x.rpm php-devel-5.1.6-27.el5_6.4.s390x.rpm php-gd-5.1.6-27.el5_6.4.s390x.rpm php-imap-5.1.6-27.el5_6.4.s390x.rpm php-ldap-5.1.6-27.el5_6.4.s390x.rpm php-mbstring-5.1.6-27.el5_6.4.s390x.rpm php-mysql-5.1.6-27.el5_6.4.s390x.rpm php-ncurses-5.1.6-27.el5_6.4.s390x.rpm php-odbc-5.1.6-27.el5_6.4.s390x.rpm php-pdo-5.1.6-27.el5_6.4.s390x.rpm php-pgsql-5.1.6-27.el5_6.4.s390x.rpm php-snmp-5.1.6-27.el5_6.4.s390x.rpm php-soap-5.1.6-27.el5_6.4.s390x.rpm php-xml-5.1.6-27.el5_6.4.s390x.rpm php-xmlrpc-5.1.6-27.el5_6.4.s390x.rpm
x86_64: php-5.1.6-27.el5_6.4.x86_64.rpm php-bcmath-5.1.6-27.el5_6.4.x86_64.rpm php-cli-5.1.6-27.el5_6.4.x86_64.rpm php-common-5.1.6-27.el5_6.4.x86_64.rpm php-dba-5.1.6-27.el5_6.4.x86_64.rpm php-debuginfo-5.1.6-27.el5_6.4.x86_64.rpm php-devel-5.1.6-27.el5_6.4.x86_64.rpm php-gd-5.1.6-27.el5_6.4.x86_64.rpm php-imap-5.1.6-27.el5_6.4.x86_64.rpm php-ldap-5.1.6-27.el5_6.4.x86_64.rpm php-mbstring-5.1.6-27.el5_6.4.x86_64.rpm php-mysql-5.1.6-27.el5_6.4.x86_64.rpm php-ncurses-5.1.6-27.el5_6.4.x86_64.rpm php-odbc-5.1.6-27.el5_6.4.x86_64.rpm php-pdo-5.1.6-27.el5_6.4.x86_64.rpm php-pgsql-5.1.6-27.el5_6.4.x86_64.rpm php-snmp-5.1.6-27.el5_6.4.x86_64.rpm php-soap-5.1.6-27.el5_6.4.x86_64.rpm php-xml-5.1.6-27.el5_6.4.x86_64.rpm php-xmlrpc-5.1.6-27.el5_6.4.x86_64.rpm
Red Hat Enterprise Linux Server EUS (v. 6.0):
Source: php-5.3.2-6.el6_0.2.src.rpm
i386: php-5.3.2-6.el6_0.2.i686.rpm php-cli-5.3.2-6.el6_0.2.i686.rpm php-common-5.3.2-6.el6_0.2.i686.rpm php-debuginfo-5.3.2-6.el6_0.2.i686.rpm php-gd-5.3.2-6.el6_0.2.i686.rpm php-ldap-5.3.2-6.el6_0.2.i686.rpm php-mysql-5.3.2-6.el6_0.2.i686.rpm php-odbc-5.3.2-6.el6_0.2.i686.rpm php-pdo-5.3.2-6.el6_0.2.i686.rpm php-pgsql-5.3.2-6.el6_0.2.i686.rpm php-soap-5.3.2-6.el6_0.2.i686.rpm php-xml-5.3.2-6.el6_0.2.i686.rpm php-xmlrpc-5.3.2-6.el6_0.2.i686.rpm
ppc64: php-5.3.2-6.el6_0.2.ppc64.rpm php-cli-5.3.2-6.el6_0.2.ppc64.rpm php-common-5.3.2-6.el6_0.2.ppc64.rpm php-debuginfo-5.3.2-6.el6_0.2.ppc64.rpm php-gd-5.3.2-6.el6_0.2.ppc64.rpm php-ldap-5.3.2-6.el6_0.2.ppc64.rpm php-mysql-5.3.2-6.el6_0.2.ppc64.rpm php-odbc-5.3.2-6.el6_0.2.ppc64.rpm php-pdo-5.3.2-6.el6_0.2.ppc64.rpm php-pgsql-5.3.2-6.el6_0.2.ppc64.rpm php-soap-5.3.2-6.el6_0.2.ppc64.rpm php-xml-5.3.2-6.el6_0.2.ppc64.rpm php-xmlrpc-5.3.2-6.el6_0.2.ppc64.rpm
s390x: php-5.3.2-6.el6_0.2.s390x.rpm php-cli-5.3.2-6.el6_0.2.s390x.rpm php-common-5.3.2-6.el6_0.2.s390x.rpm php-debuginfo-5.3.2-6.el6_0.2.s390x.rpm php-gd-5.3.2-6.el6_0.2.s390x.rpm php-ldap-5.3.2-6.el6_0.2.s390x.rpm php-mysql-5.3.2-6.el6_0.2.s390x.rpm php-odbc-5.3.2-6.el6_0.2.s390x.rpm php-pdo-5.3.2-6.el6_0.2.s390x.rpm php-pgsql-5.3.2-6.el6_0.2.s390x.rpm php-soap-5.3.2-6.el6_0.2.s390x.rpm php-xml-5.3.2-6.el6_0.2.s390x.rpm php-xmlrpc-5.3.2-6.el6_0.2.s390x.rpm
x86_64: php-5.3.2-6.el6_0.2.x86_64.rpm php-cli-5.3.2-6.el6_0.2.x86_64.rpm php-common-5.3.2-6.el6_0.2.x86_64.rpm php-debuginfo-5.3.2-6.el6_0.2.x86_64.rpm php-gd-5.3.2-6.el6_0.2.x86_64.rpm php-ldap-5.3.2-6.el6_0.2.x86_64.rpm php-mysql-5.3.2-6.el6_0.2.x86_64.rpm php-odbc-5.3.2-6.el6_0.2.x86_64.rpm php-pdo-5.3.2-6.el6_0.2.x86_64.rpm php-pgsql-5.3.2-6.el6_0.2.x86_64.rpm php-soap-5.3.2-6.el6_0.2.x86_64.rpm php-xml-5.3.2-6.el6_0.2.x86_64.rpm php-xmlrpc-5.3.2-6.el6_0.2.x86_64.rpm
Red Hat Enterprise Linux Server EUS (v. 6.1):
Source: php-5.3.3-3.el6_1.4.src.rpm
i386: php-5.3.3-3.el6_1.4.i686.rpm php-cli-5.3.3-3.el6_1.4.i686.rpm php-common-5.3.3-3.el6_1.4.i686.rpm php-debuginfo-5.3.3-3.el6_1.4.i686.rpm php-gd-5.3.3-3.el6_1.4.i686.rpm php-ldap-5.3.3-3.el6_1.4.i686.rpm php-mysql-5.3.3-3.el6_1.4.i686.rpm php-odbc-5.3.3-3.el6_1.4.i686.rpm php-pdo-5.3.3-3.el6_1.4.i686.rpm php-pgsql-5.3.3-3.el6_1.4.i686.rpm php-soap-5.3.3-3.el6_1.4.i686.rpm php-xml-5.3.3-3.el6_1.4.i686.rpm php-xmlrpc-5.3.3-3.el6_1.4.i686.rpm
ppc64: php-5.3.3-3.el6_1.4.ppc64.rpm php-cli-5.3.3-3.el6_1.4.ppc64.rpm php-common-5.3.3-3.el6_1.4.ppc64.rpm php-debuginfo-5.3.3-3.el6_1.4.ppc64.rpm php-gd-5.3.3-3.el6_1.4.ppc64.rpm php-ldap-5.3.3-3.el6_1.4.ppc64.rpm php-mysql-5.3.3-3.el6_1.4.ppc64.rpm php-odbc-5.3.3-3.el6_1.4.ppc64.rpm php-pdo-5.3.3-3.el6_1.4.ppc64.rpm php-pgsql-5.3.3-3.el6_1.4.ppc64.rpm php-soap-5.3.3-3.el6_1.4.ppc64.rpm php-xml-5.3.3-3.el6_1.4.ppc64.rpm php-xmlrpc-5.3.3-3.el6_1.4.ppc64.rpm
s390x: php-5.3.3-3.el6_1.4.s390x.rpm php-cli-5.3.3-3.el6_1.4.s390x.rpm php-common-5.3.3-3.el6_1.4.s390x.rpm php-debuginfo-5.3.3-3.el6_1.4.s390x.rpm php-gd-5.3.3-3.el6_1.4.s390x.rpm php-ldap-5.3.3-3.el6_1.4.s390x.rpm php-mysql-5.3.3-3.el6_1.4.s390x.rpm php-odbc-5.3.3-3.el6_1.4.s390x.rpm php-pdo-5.3.3-3.el6_1.4.s390x.rpm php-pgsql-5.3.3-3.el6_1.4.s390x.rpm php-soap-5.3.3-3.el6_1.4.s390x.rpm php-xml-5.3.3-3.el6_1.4.s390x.rpm php-xmlrpc-5.3.3-3.el6_1.4.s390x.rpm
x86_64: php-5.3.3-3.el6_1.4.x86_64.rpm php-cli-5.3.3-3.el6_1.4.x86_64.rpm php-common-5.3.3-3.el6_1.4.x86_64.rpm php-debuginfo-5.3.3-3.el6_1.4.x86_64.rpm php-gd-5.3.3-3.el6_1.4.x86_64.rpm php-ldap-5.3.3-3.el6_1.4.x86_64.rpm php-mysql-5.3.3-3.el6_1.4.x86_64.rpm php-odbc-5.3.3-3.el6_1.4.x86_64.rpm php-pdo-5.3.3-3.el6_1.4.x86_64.rpm php-pgsql-5.3.3-3.el6_1.4.x86_64.rpm php-soap-5.3.3-3.el6_1.4.x86_64.rpm php-xml-5.3.3-3.el6_1.4.x86_64.rpm php-xmlrpc-5.3.3-3.el6_1.4.x86_64.rpm
Red Hat Enterprise Linux Server Optional EUS (v. 6.0):
Source: php-5.3.2-6.el6_0.2.src.rpm
i386: php-bcmath-5.3.2-6.el6_0.2.i686.rpm php-dba-5.3.2-6.el6_0.2.i686.rpm php-debuginfo-5.3.2-6.el6_0.2.i686.rpm php-devel-5.3.2-6.el6_0.2.i686.rpm php-embedded-5.3.2-6.el6_0.2.i686.rpm php-enchant-5.3.2-6.el6_0.2.i686.rpm php-imap-5.3.2-6.el6_0.2.i686.rpm php-intl-5.3.2-6.el6_0.2.i686.rpm php-mbstring-5.3.2-6.el6_0.2.i686.rpm php-process-5.3.2-6.el6_0.2.i686.rpm php-pspell-5.3.2-6.el6_0.2.i686.rpm php-recode-5.3.2-6.el6_0.2.i686.rpm php-snmp-5.3.2-6.el6_0.2.i686.rpm php-tidy-5.3.2-6.el6_0.2.i686.rpm php-zts-5.3.2-6.el6_0.2.i686.rpm
ppc64: php-bcmath-5.3.2-6.el6_0.2.ppc64.rpm php-dba-5.3.2-6.el6_0.2.ppc64.rpm php-debuginfo-5.3.2-6.el6_0.2.ppc64.rpm php-devel-5.3.2-6.el6_0.2.ppc64.rpm php-embedded-5.3.2-6.el6_0.2.ppc64.rpm php-enchant-5.3.2-6.el6_0.2.ppc64.rpm php-imap-5.3.2-6.el6_0.2.ppc64.rpm php-intl-5.3.2-6.el6_0.2.ppc64.rpm php-mbstring-5.3.2-6.el6_0.2.ppc64.rpm php-process-5.3.2-6.el6_0.2.ppc64.rpm php-pspell-5.3.2-6.el6_0.2.ppc64.rpm php-recode-5.3.2-6.el6_0.2.ppc64.rpm php-snmp-5.3.2-6.el6_0.2.ppc64.rpm php-tidy-5.3.2-6.el6_0.2.ppc64.rpm php-zts-5.3.2-6.el6_0.2.ppc64.rpm
s390x: php-bcmath-5.3.2-6.el6_0.2.s390x.rpm php-dba-5.3.2-6.el6_0.2.s390x.rpm php-debuginfo-5.3.2-6.el6_0.2.s390x.rpm php-devel-5.3.2-6.el6_0.2.s390x.rpm php-embedded-5.3.2-6.el6_0.2.s390x.rpm php-enchant-5.3.2-6.el6_0.2.s390x.rpm php-imap-5.3.2-6.el6_0.2.s390x.rpm php-intl-5.3.2-6.el6_0.2.s390x.rpm php-mbstring-5.3.2-6.el6_0.2.s390x.rpm php-process-5.3.2-6.el6_0.2.s390x.rpm php-pspell-5.3.2-6.el6_0.2.s390x.rpm php-recode-5.3.2-6.el6_0.2.s390x.rpm php-snmp-5.3.2-6.el6_0.2.s390x.rpm php-tidy-5.3.2-6.el6_0.2.s390x.rpm php-zts-5.3.2-6.el6_0.2.s390x.rpm
x86_64: php-bcmath-5.3.2-6.el6_0.2.x86_64.rpm php-dba-5.3.2-6.el6_0.2.x86_64.rpm php-debuginfo-5.3.2-6.el6_0.2.x86_64.rpm php-devel-5.3.2-6.el6_0.2.x86_64.rpm php-embedded-5.3.2-6.el6_0.2.x86_64.rpm php-enchant-5.3.2-6.el6_0.2.x86_64.rpm php-imap-5.3.2-6.el6_0.2.x86_64.rpm php-intl-5.3.2-6.el6_0.2.x86_64.rpm php-mbstring-5.3.2-6.el6_0.2.x86_64.rpm php-process-5.3.2-6.el6_0.2.x86_64.rpm php-pspell-5.3.2-6.el6_0.2.x86_64.rpm php-recode-5.3.2-6.el6_0.2.x86_64.rpm php-snmp-5.3.2-6.el6_0.2.x86_64.rpm php-tidy-5.3.2-6.el6_0.2.x86_64.rpm php-zts-5.3.2-6.el6_0.2.x86_64.rpm
Red Hat Enterprise Linux Server Optional EUS (v. 6.1):
Source: php-5.3.3-3.el6_1.4.src.rpm
i386: php-bcmath-5.3.3-3.el6_1.4.i686.rpm php-dba-5.3.3-3.el6_1.4.i686.rpm php-debuginfo-5.3.3-3.el6_1.4.i686.rpm php-devel-5.3.3-3.el6_1.4.i686.rpm php-embedded-5.3.3-3.el6_1.4.i686.rpm php-enchant-5.3.3-3.el6_1.4.i686.rpm php-imap-5.3.3-3.el6_1.4.i686.rpm php-intl-5.3.3-3.el6_1.4.i686.rpm php-mbstring-5.3.3-3.el6_1.4.i686.rpm php-process-5.3.3-3.el6_1.4.i686.rpm php-pspell-5.3.3-3.el6_1.4.i686.rpm php-recode-5.3.3-3.el6_1.4.i686.rpm php-snmp-5.3.3-3.el6_1.4.i686.rpm php-tidy-5.3.3-3.el6_1.4.i686.rpm php-zts-5.3.3-3.el6_1.4.i686.rpm
ppc64: php-bcmath-5.3.3-3.el6_1.4.ppc64.rpm php-dba-5.3.3-3.el6_1.4.ppc64.rpm php-debuginfo-5.3.3-3.el6_1.4.ppc64.rpm php-devel-5.3.3-3.el6_1.4.ppc64.rpm php-embedded-5.3.3-3.el6_1.4.ppc64.rpm php-enchant-5.3.3-3.el6_1.4.ppc64.rpm php-imap-5.3.3-3.el6_1.4.ppc64.rpm php-intl-5.3.3-3.el6_1.4.ppc64.rpm php-mbstring-5.3.3-3.el6_1.4.ppc64.rpm php-process-5.3.3-3.el6_1.4.ppc64.rpm php-pspell-5.3.3-3.el6_1.4.ppc64.rpm php-recode-5.3.3-3.el6_1.4.ppc64.rpm php-snmp-5.3.3-3.el6_1.4.ppc64.rpm php-tidy-5.3.3-3.el6_1.4.ppc64.rpm php-zts-5.3.3-3.el6_1.4.ppc64.rpm
s390x: php-bcmath-5.3.3-3.el6_1.4.s390x.rpm php-dba-5.3.3-3.el6_1.4.s390x.rpm php-debuginfo-5.3.3-3.el6_1.4.s390x.rpm php-devel-5.3.3-3.el6_1.4.s390x.rpm php-embedded-5.3.3-3.el6_1.4.s390x.rpm php-enchant-5.3.3-3.el6_1.4.s390x.rpm php-imap-5.3.3-3.el6_1.4.s390x.rpm php-intl-5.3.3-3.el6_1.4.s390x.rpm php-mbstring-5.3.3-3.el6_1.4.s390x.rpm php-process-5.3.3-3.el6_1.4.s390x.rpm php-pspell-5.3.3-3.el6_1.4.s390x.rpm php-recode-5.3.3-3.el6_1.4.s390x.rpm php-snmp-5.3.3-3.el6_1.4.s390x.rpm php-tidy-5.3.3-3.el6_1.4.s390x.rpm php-zts-5.3.3-3.el6_1.4.s390x.rpm
x86_64: php-bcmath-5.3.3-3.el6_1.4.x86_64.rpm php-dba-5.3.3-3.el6_1.4.x86_64.rpm php-debuginfo-5.3.3-3.el6_1.4.x86_64.rpm php-devel-5.3.3-3.el6_1.4.x86_64.rpm php-embedded-5.3.3-3.el6_1.4.x86_64.rpm php-enchant-5.3.3-3.el6_1.4.x86_64.rpm php-imap-5.3.3-3.el6_1.4.x86_64.rpm php-intl-5.3.3-3.el6_1.4.x86_64.rpm php-mbstring-5.3.3-3.el6_1.4.x86_64.rpm php-process-5.3.3-3.el6_1.4.x86_64.rpm php-pspell-5.3.3-3.el6_1.4.x86_64.rpm php-recode-5.3.3-3.el6_1.4.x86_64.rpm php-snmp-5.3.3-3.el6_1.4.x86_64.rpm php-tidy-5.3.3-3.el6_1.4.x86_64.rpm php-zts-5.3.3-3.el6_1.4.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package
- References:
https://www.redhat.com/security/data/cve/CVE-2012-1823.html https://access.redhat.com/security/updates/classification/#critical
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2012 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFPq+BrXlSAg2UNWIIRAlkPAJ99QQuun9ljsbFTsnMoLAbItDTJUQCggigr NQJBwTDuCJX2FNa8cSIcWCY= =s0aa -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . Content-Disposition: inline
==========================================================================Ubuntu Security Notice USN-1437-1 May 04, 2012
php5 vulnerability
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
- Ubuntu 11.10
- Ubuntu 11.04
- Ubuntu 10.04 LTS
- Ubuntu 8.04 LTS
Summary:
Standalone PHP CGI scripts could be made to execute arbitrary code with the privilege of the web server. Configurations using mod_php5 and FastCGI were not vulnerable. Please see http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-2311.html for more details and potential mitigation approaches.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 12.04 LTS: php5-cgi 5.3.10-1ubuntu3.1
Ubuntu 11.10: php5-cgi 5.3.6-13ubuntu3.7
Ubuntu 11.04: php5-cgi 5.3.5-1ubuntu7.8
Ubuntu 10.04 LTS: php5-cgi 5.3.2-1ubuntu4.15
Ubuntu 8.04 LTS: php5-cgi 5.2.4-2ubuntu5.24
In general, a standard system update will make all the necessary changes
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201205-0305",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "hp-ux",
"scope": "eq",
"trust": 1.0,
"vendor": "hp",
"version": "b.11.23"
},
{
"model": "mac os x",
"scope": "lt",
"trust": 1.0,
"vendor": "apple",
"version": "10.7.5"
},
{
"model": "mac os x",
"scope": "gte",
"trust": 1.0,
"vendor": "apple",
"version": "10.6.8"
},
{
"model": "enterprise linux server",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "5.0"
},
{
"model": "enterprise linux server",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "6.0"
},
{
"model": "linux enterprise server",
"scope": "eq",
"trust": 1.0,
"vendor": "suse",
"version": "11"
},
{
"model": "enterprise linux server aus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "5.6"
},
{
"model": "hp-ux",
"scope": "eq",
"trust": 1.0,
"vendor": "hp",
"version": "b.11.31"
},
{
"model": "enterprise linux eus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "6.1"
},
{
"model": "mac os x",
"scope": "gte",
"trust": 1.0,
"vendor": "apple",
"version": "10.8.0"
},
{
"model": "enterprise linux eus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "6.2"
},
{
"model": "php",
"scope": "lt",
"trust": 1.0,
"vendor": "php",
"version": "5.3.12"
},
{
"model": "linux",
"scope": "eq",
"trust": 1.0,
"vendor": "debian",
"version": "6.0"
},
{
"model": "gluster storage server for on-premise",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "2.0"
},
{
"model": "enterprise linux eus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "5.6"
},
{
"model": "opensuse",
"scope": "eq",
"trust": 1.0,
"vendor": "opensuse",
"version": "12.1"
},
{
"model": "linux enterprise server",
"scope": "eq",
"trust": 1.0,
"vendor": "suse",
"version": "10"
},
{
"model": "linux enterprise software development kit",
"scope": "eq",
"trust": 1.0,
"vendor": "suse",
"version": "11"
},
{
"model": "application stack",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "2.0"
},
{
"model": "mac os x",
"scope": "lt",
"trust": 1.0,
"vendor": "apple",
"version": "10.8.2"
},
{
"model": "php",
"scope": "lt",
"trust": 1.0,
"vendor": "php",
"version": "5.4.2"
},
{
"model": "enterprise linux workstation",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "5.0"
},
{
"model": "php",
"scope": "gte",
"trust": 1.0,
"vendor": "php",
"version": "5.4.0"
},
{
"model": "enterprise linux server aus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "5.3"
},
{
"model": "linux enterprise software development kit",
"scope": "eq",
"trust": 1.0,
"vendor": "suse",
"version": "10"
},
{
"model": "enterprise linux desktop",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "6.0"
},
{
"model": "enterprise linux workstation",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "6.0"
},
{
"model": "storage for public cloud",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "2.0"
},
{
"model": "fedora",
"scope": "eq",
"trust": 1.0,
"vendor": "fedoraproject",
"version": "39"
},
{
"model": "fedora",
"scope": "eq",
"trust": 1.0,
"vendor": "fedoraproject",
"version": "40"
},
{
"model": "storage",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "2.0"
},
{
"model": "opensuse",
"scope": "eq",
"trust": 1.0,
"vendor": "opensuse",
"version": "11.4"
},
{
"model": "php",
"scope": "lt",
"trust": 0.8,
"vendor": "the php group",
"version": "version 5.3.12 earlier"
},
{
"model": "php",
"scope": "lt",
"trust": 0.8,
"vendor": "the php group",
"version": "version 5.4.2 earlier"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.6.8"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.7 to v10.7.4"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.8 and v10.8.1"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.6.8"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.7 to v10.7.4"
},
{
"model": "garoon",
"scope": "eq",
"trust": 0.8,
"vendor": "cybozu",
"version": "3.1.0 to 3.1.3"
},
{
"model": "garoon",
"scope": "eq",
"trust": 0.8,
"vendor": "cybozu",
"version": "3.5.0 to 3.5.1"
},
{
"model": "plesk panel",
"scope": "eq",
"trust": 0.3,
"vendor": "parallels",
"version": "9.5.4"
},
{
"model": "linux i386",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "11.10"
},
{
"model": "system management homepage",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "6.2"
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.3.1"
},
{
"model": "enterprise linux hpc node optional",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "system management homepage",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "7.2"
},
{
"model": "linux arm",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "linux ia-64",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "ip office application server",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "8.1"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.3,
"vendor": "oracle",
"version": "6.2"
},
{
"model": "voice portal sp1",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.0"
},
{
"model": "enterprise linux server",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.3.8"
},
{
"model": "linux enterprise sdk sp1",
"scope": "eq",
"trust": 0.3,
"vendor": "suse",
"version": "11"
},
{
"model": "voice portal",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.1"
},
{
"model": "linux enterprise server sp3 ltss",
"scope": "eq",
"trust": 0.3,
"vendor": "suse",
"version": "10"
},
{
"model": "aura application enablement services",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.2"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.3,
"vendor": "oracle",
"version": "5"
},
{
"model": "enterprise linux server eus 6.1.z",
"scope": null,
"trust": 0.3,
"vendor": "redhat",
"version": null
},
{
"model": "enterprise linux server optional",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux long life server",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "5.3"
},
{
"model": "appliance server",
"scope": "eq",
"trust": 0.3,
"vendor": "turbolinux",
"version": "3.0"
},
{
"model": "aura application enablement services",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.2.3"
},
{
"model": "enterprise server",
"scope": "eq",
"trust": 0.3,
"vendor": "mandrakesoft",
"version": "5"
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.3.10"
},
{
"model": "voice portal sp2",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.0"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.7"
},
{
"model": "ctpview",
"scope": "eq",
"trust": 0.3,
"vendor": "juniper",
"version": "4.6"
},
{
"model": "aura application enablement services",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "6.1"
},
{
"model": "linux amd64",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "11.10"
},
{
"model": "system management homepage",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "7.0"
},
{
"model": "aura application enablement services",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "6.1.1"
},
{
"model": "aura communication manager utility services",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "6.1"
},
{
"model": "linux lts amd64",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "8.04"
},
{
"model": "linux mandrake x86 64",
"scope": "eq",
"trust": 0.3,
"vendor": "mandriva",
"version": "2011"
},
{
"model": "enterprise linux workstation",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.6.8"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.7.5"
},
{
"model": "linux lts powerpc",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "8.04"
},
{
"model": "linux amd64",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.04"
},
{
"model": "ctpview",
"scope": "eq",
"trust": 0.3,
"vendor": "juniper",
"version": "4.3"
},
{
"model": "aura messaging",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "6.0.1"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.7.3"
},
{
"model": "linux enterprise sdk sp4",
"scope": "eq",
"trust": 0.3,
"vendor": "suse",
"version": "10"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.7.4"
},
{
"model": "ctpview",
"scope": "eq",
"trust": 0.3,
"vendor": "juniper",
"version": "4.2"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.8"
},
{
"model": "opensuse",
"scope": "eq",
"trust": 0.3,
"vendor": "s u s e",
"version": "11.4"
},
{
"model": "linux amd64",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "11.04"
},
{
"model": "enterprise linux workstation optional",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "voice portal",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.1.1"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.8.1"
},
{
"model": "linux i386",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.04"
},
{
"model": "aura communication manager",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "6.0"
},
{
"model": "plesk panel",
"scope": "eq",
"trust": 0.3,
"vendor": "parallels",
"version": "9.3"
},
{
"model": "linux lts sparc",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "8.04"
},
{
"model": "linux sparc",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "ctpview 7.0r1",
"scope": "ne",
"trust": 0.3,
"vendor": "juniper",
"version": null
},
{
"model": "lotus foundations start 1.2.2b",
"scope": "ne",
"trust": 0.3,
"vendor": "ibm",
"version": null
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.3.9"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.7.1"
},
{
"model": "system management homepage",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "6.1"
},
{
"model": "aura messaging",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "6.1"
},
{
"model": "linux lts i386",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "8.04"
},
{
"model": "linux i386",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "11.04"
},
{
"model": "aura application enablement services",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.2.2"
},
{
"model": "enterprise linux eus 5.6.z server",
"scope": null,
"trust": 0.3,
"vendor": "redhat",
"version": null
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.7.2"
},
{
"model": "system management homepage",
"scope": "ne",
"trust": 0.3,
"vendor": "hp",
"version": "7.2.1"
},
{
"model": "linux enterprise server sp1",
"scope": "eq",
"trust": 0.3,
"vendor": "suse",
"version": "11"
},
{
"model": "aura session manager sp1",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.2"
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.4.2"
},
{
"model": "linux enterprise server sp4",
"scope": "eq",
"trust": 0.3,
"vendor": "suse",
"version": "10"
},
{
"model": "ip office application server",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "6.1"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.3,
"vendor": "oracle",
"version": "6"
},
{
"model": "lotus foundations start 1.2.2a",
"scope": null,
"trust": 0.3,
"vendor": "ibm",
"version": null
},
{
"model": "mac os",
"scope": "ne",
"trust": 0.3,
"vendor": "apple",
"version": "x10.7.5"
},
{
"model": "ctpview",
"scope": "eq",
"trust": 0.3,
"vendor": "juniper",
"version": "4.5"
},
{
"model": "aura application enablement services",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.2.1"
},
{
"model": "linux sparc",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.04"
},
{
"model": "enterprise linux desktop optional",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "aura communication manager utility services",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "6.0"
},
{
"model": "linux mandrake x86 64",
"scope": "eq",
"trust": 0.3,
"vendor": "mandriva",
"version": "2010.1"
},
{
"model": "voice portal sp1",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.1"
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.3.3"
},
{
"model": "linux enterprise server sp2",
"scope": "eq",
"trust": 0.3,
"vendor": "suse",
"version": "11"
},
{
"model": "voice portal",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.1.2"
},
{
"model": "ip office application server",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "7.0"
},
{
"model": "linux",
"scope": null,
"trust": 0.3,
"vendor": "gentoo",
"version": null
},
{
"model": "linux enterprise sdk sp2",
"scope": "eq",
"trust": 0.3,
"vendor": "suse",
"version": "11"
},
{
"model": "linux powerpc",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.04"
},
{
"model": "enterprise linux server optional eus",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6.1"
},
{
"model": "linux lts i386",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "12.04"
},
{
"model": "enterprise linux hpc node",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.3.6"
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.3.5"
},
{
"model": "linux amd64",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "aura communication manager",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "6.0.1"
},
{
"model": "server",
"scope": "eq",
"trust": 0.3,
"vendor": "turbolinux",
"version": "110"
},
{
"model": "voice portal",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.0"
},
{
"model": "aura session manager",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.2"
},
{
"model": "ip office application server",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "8.0"
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.3.4"
},
{
"model": "linux mandrake",
"scope": "eq",
"trust": 0.3,
"vendor": "mandriva",
"version": "2011"
},
{
"model": "linux lts lpia",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "8.04"
},
{
"model": "linux arm",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.04"
},
{
"model": "linux powerpc",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "11.04"
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.3.12"
},
{
"model": "ctpview",
"scope": "eq",
"trust": 0.3,
"vendor": "juniper",
"version": "4.4"
},
{
"model": "enterprise linux server",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "5"
},
{
"model": "linux lts amd64",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "12.04"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.7"
},
{
"model": "linux ia-32",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.3.7"
},
{
"model": "linux mips",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "linux arm",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "11.04"
},
{
"model": "system management homepage",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "6.0"
},
{
"model": "aura messaging",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "6.0"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.6.8"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.7.3"
},
{
"model": "linux enterprise server for vmware sp1",
"scope": "eq",
"trust": 0.3,
"vendor": "suse",
"version": "11"
},
{
"model": "system management homepage",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "7.1.2"
},
{
"model": "mac os",
"scope": "ne",
"trust": 0.3,
"vendor": "apple",
"version": "x10.8.2"
},
{
"model": "linux enterprise server for vmware sp2",
"scope": "eq",
"trust": 0.3,
"vendor": "suse",
"version": "11"
},
{
"model": "hp-ux b.11.31",
"scope": null,
"trust": 0.3,
"vendor": "hp",
"version": null
},
{
"model": "linux s/390",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "aura communication manager utility services",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "6.2"
},
{
"model": "appliance server",
"scope": "eq",
"trust": 0.3,
"vendor": "turbolinux",
"version": "3.0x64"
},
{
"model": "enterprise linux desktop workstation client",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "5"
},
{
"model": "plesk panel",
"scope": "eq",
"trust": 0.3,
"vendor": "parallels",
"version": "9.2"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.7.1"
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.4.1"
},
{
"model": "linux powerpc",
"scope": "eq",
"trust": 0.3,
"vendor": "debian",
"version": "6.0"
},
{
"model": "client",
"scope": "eq",
"trust": 0.3,
"vendor": "turbolinux",
"version": "2008"
},
{
"model": "plesk panel",
"scope": "eq",
"trust": 0.3,
"vendor": "parallels",
"version": "8.6"
},
{
"model": "plesk panel",
"scope": "eq",
"trust": 0.3,
"vendor": "parallels",
"version": "9.0"
},
{
"model": "ip office application server",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "6.0"
},
{
"model": "system management homepage",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "6.3"
},
{
"model": "lotus foundations start",
"scope": "eq",
"trust": 0.3,
"vendor": "ibm",
"version": "1.2"
},
{
"model": "system management homepage",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "7.1.1"
},
{
"model": "enterprise server x86 64",
"scope": "eq",
"trust": 0.3,
"vendor": "mandrakesoft",
"version": "5"
},
{
"model": "system management homepage",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "7.1"
},
{
"model": "enterprise linux server eus",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6.0"
},
{
"model": "aura session manager sp2",
"scope": "eq",
"trust": 0.3,
"vendor": "avaya",
"version": "5.2"
},
{
"model": "server",
"scope": "eq",
"trust": 0.3,
"vendor": "turbolinux",
"version": "11x64"
},
{
"model": "system management homepage",
"scope": "ne",
"trust": 0.3,
"vendor": "hp",
"version": "7.1.1"
},
{
"model": "enterprise linux server optional eus",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6.0"
},
{
"model": "opensuse",
"scope": "eq",
"trust": 0.3,
"vendor": "s u s e",
"version": "12.1"
},
{
"model": "php",
"scope": "eq",
"trust": 0.3,
"vendor": "php",
"version": "5.3.2"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.7.2"
},
{
"model": "linux mandrake",
"scope": "eq",
"trust": 0.3,
"vendor": "mandriva",
"version": "2010.1"
},
{
"model": "php",
"scope": "ne",
"trust": 0.3,
"vendor": "php",
"version": "5.3.13"
}
],
"sources": [
{
"db": "BID",
"id": "53388"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002235"
},
{
"db": "NVD",
"id": "CVE-2012-1823"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.3.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.3.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.3.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.14:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.16:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.3.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.17:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "5.3.11",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.3.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.3.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.15:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:php:php:5.4.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:php:php:5.4.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2012-1823"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "De Eindbazen",
"sources": [
{
"db": "BID",
"id": "53388"
}
],
"trust": 0.3
},
"cve": "CVE-2012-1823",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 7.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2012-1823",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.9,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2012-1823",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2012-1823",
"trust": 0.8,
"value": "High"
},
{
"author": "VULMON",
"id": "CVE-2012-1823",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2012-1823"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002235"
},
{
"db": "NVD",
"id": "CVE-2012-1823"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the \u0027d\u0027 case. PHP is prone to an information-disclosure vulnerability. \nExploiting this issue allows remote attackers to view the source code of files in the context of the server process. This may allow the attacker to obtain sensitive information and to run arbitrary PHP code on the affected computer; other attacks are also possible. ----------------------------------------------------------------------\n\nBecome a PSI 3.0 beta tester!\nTest-drive the new beta version and tell us what you think about its extended automatic update function and significantly enhanced user-interface. \nDownload it here!\nhttp://secunia.com/psi_30_beta_launch\n\n----------------------------------------------------------------------\n\nTITLE:\nUbuntu update for php\n\nSECUNIA ADVISORY ID:\nSA49097\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/49097/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=49097\n\nRELEASE DATE:\n2012-05-07\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/49097/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/49097/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=49097\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nUbuntu has issued an update for php. This fixes a vulnerability,\nwhich can be exploited by malicious people to disclose certain\nsensitive information or compromise a vulnerable system. \n\nFor more information:\nSA49014\n\nSOLUTION:\nApply updated packages. \n\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nORIGINAL ADVISORY:\nUSN-1437-1:\nhttp://www.ubuntu.com/usn/usn-1437-1/\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. \nHP System Management Homepage (SMH) before v7.1.1 running on Linux and\nWindows. HP System Management Homepage v7.1.1 is available here:\n\nHP System Management Homepage for Windows x64\n\n[Download here] or enter the following URL into the browser address window. \n\nhttp://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdDetail\ns/?sp4ts.oid=4091409\u0026spf_p.tpst=psiSwdMain\u0026spf_p.prp_psiSwdMain=wsrp-navigati\nonalState%3Dlang%253Den%257Ccc%253DUS%257CprodSeriesId%253D4091408%257CprodNa\nmeId%253D4091409%257CswEnvOID%253D4064%257CswLang%253D8%257CswItem%253DMTX-ab\n0d4e9bb4654a8da503eccfd9%257Cmode%253D3%257Caction%253DdriverDocument\u0026javax.p\nortlet.begCacheTok=com.vignette.cachetoken\u0026javax.portlet.endCacheTok=com.vign\nette.cachetoken\n\nHP System Management Homepage for Windows x86\n\n[Download here] or enter the following URL into the browser address window. \n\nhttp://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdDetail\ns/?sp4ts.oid=4091409\u0026spf_p.tpst=psiSwdMain\u0026spf_p.prp_psiSwdMain=wsrp-navigati\nonalState%3Dlang%253Den%257Ccc%253DUS%257CprodSeriesId%253D4091408%257CprodNa\nmeId%253D4091409%257CswEnvOID%253D4022%257CswLang%253D8%257CswItem%253DMTX-f7\nc0d15d28474255bd0ec23136%257Cmode%253D3%257Caction%253DdriverDocument\u0026javax.p\nortlet.begCacheTok=com.vignette.cachetoken\u0026javax.portlet.endCacheTok=com.vign\nette.cachetoken\n\nHP System Management Homepage for Linux (AMD64/EM64T)\n\n[Download here] or enter the following URL into the browser address window. \n\nhttp://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdDetail\ns/?sp4ts.oid=4091409\u0026spf_p.tpst=psiSwdMain\u0026spf_p.prp_psiSwdMain=wsrp-navigati\nonalState%3Dlang%253Den%257Ccc%253DUS%257CprodSeriesId%253D4091408%257CprodNa\nmeId%253D4091409%257CswEnvOID%253D4035%257CswLang%253D8%257CswItem%253DMTX-18\nd373dd1361400fbaca892942%257Cmode%253D3%257Caction%253DdriverDocument\u0026javax.p\nortlet.begCacheTok=com.vignette.cachetoken\u0026javax.portlet.endCacheTok=com.vign\nette.cachetoken\n\nHP System Management Homepage for Linux (x86)\n\n[Download here] or enter the following URL into the browser address window. \n\nAdditionally, this update fixes insufficient validation of upload\nname which lead to corrupted $_FILES indices. \n\nFor the stable distribution (squeeze), this problem has been fixed in\nversion 5.3.3-7+squeeze9. \n\nThe testing distribution (wheezy) will be fixed soon. \n\nFor the unstable distribution (sid), this problem has been fixed in\nversion 5.4.3-1. \n\nWe recommend that you upgrade your php5 packages. \nCharter: http://lists.grok.org.uk/full-disclosure-charter.html\nHosted and sponsored by Secunia - http://secunia.com/\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nNote: the current version of the following document is available here:\nhttps://h20566.www2.hp.com/portal/site/hpsc/public/kb/\ndocDisplay?docId=emr_na-c03368475\n\nSUPPORT COMMUNICATION - SECURITY BULLETIN\n\nDocument ID: c03368475\nVersion: 1\n\nHPSBUX02791 SSRT100856 rev.1 - HP-UX Apache Web Server running PHP, Remote\nExecution of Arbitrary Code, Privilege Elevation, Denial of Service (DoS)\n\nNOTICE: The information in this Security Bulletin should be acted upon as\nsoon as possible. \n\nRelease Date: 2012-06-14\nLast Updated: 2012-06-14\n\nPotential Security Impact: Remote execution of arbitrary code, privilege\nelevation, or Denial of Service (DoS). \n\nSource: Hewlett-Packard Company, HP Software Security Response Team\n\nVULNERABILITY SUMMARY\nPotential security vulnerabilities have been identified with HP-UX Apache Web\nServer running PHP. These vulnerabilities could be exploited remotely to\nexecute arbitrary code, elevate privileges, or create a Denial of Service\n(DoS). \n\nReferences: CVE-2011-4153, CVE-2012-0830, CVE-2012-0883, CVE-2012-1172,\nCVE-2012-1823, CVE-2012-2311\n\nSUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. \nHP-UX B.11.23, B.11.31 running HP-UX Apache Web Server Suite v3.24 or earlier\n\nBACKGROUND\nFor a PGP signed\n\nCVSS 2.0 Base Metrics\n===========================================================\n Reference Base Vector Base Score\nCVE-2011-4153 (AV:N/AC:L/Au:N/C:N/I:N/A:P) 5.0\nCVE-2012-0830 (AV:N/AC:L/Au:N/C:P/I:P/A:P) 7.5\nCVE-2012-0883 (AV:L/AC:M/Au:N/C:C/I:C/A:C) 6.9\nCVE-2012-1172 (AV:N/AC:M/Au:N/C:N/I:P/A:P) 5.8\nCVE-2012-1823 (AV:N/AC:L/Au:N/C:P/I:P/A:P) 7.5\nCVE-2012-2311 (AV:N/AC:L/Au:N/C:P/I:P/A:P) 7.5\n===========================================================\n Information on CVSS is documented\n in HP Customer Notice: HPSN-2008-002\n\nRESOLUTION\n\nHP has provided the following software updates to resolve the\nvulnerabilities. \nThe updates are available for download from http://software.hp.com\n\nHP-UX Web Server Suite v.3.24 containing Apache v2.2.15.13 and PHP v5.2.17\nHP-UX 11i Release\n Apache Depot name\n\nB.11.23 (32-bit)\n HPUXWS22ATW-B324-32\n\nB.11.23 (64-bit)\n HPUXWS22ATW-B324-64\n\nB.11.31 (32-bit)\n HPUXWS22ATW-B324-32\n\nB.11.31 (64-bit)\n HPUXWS22ATW-B324-64\n\nMANUAL ACTIONS: Yes - Update\nInstall HP-UX Web Server Suite v3.24 or subsequent. \n\nPRODUCT SPECIFIC INFORMATION\n\nHP-UX Software Assistant: HP-UX Software Assistant is an enhanced application\nthat replaces HP-UX Security Patch Check. It analyzes all Security Bulletins\nissued by HP and lists recommended actions that may apply to a specific HP-UX\nsystem. It can also download patches and create a depot automatically. For\nmore information see https://www.hp.com/go/swa\n\nThe following text is for use by the HP-UX Software Assistant. \nHP-UX Web Server Suite v3.24\nAFFECTED VERSIONS\n\nHP-UX B.11.23\n==============\nhpuxws22APCH32.APACHE\nhpuxws22APCH32.APACHE2\nhpuxws22APCH32.AUTH_LDAP\nhpuxws22APCH32.AUTH_LDAP2\nhpuxws22APCH32.MOD_JK\nhpuxws22APCH32.MOD_JK2\nhpuxws22APCH32.MOD_PERL\nhpuxws22APCH32.MOD_PERL2\nhpuxws22APCH32.PHP\nhpuxws22APCH32.PHP2\nhpuxws22APCH32.WEBPROXY\nhpuxws22APCH32.WEBPROXY2\nhpuxws22APACHE.APACHE\nhpuxws22APACHE.APACHE2\nhpuxws22APACHE.AUTH_LDAP\nhpuxws22APACHE.AUTH_LDAP2\nhpuxws22APACHE.MOD_JK\nhpuxws22APACHE.MOD_JK2\nhpuxws22APACHE.MOD_PERL\nhpuxws22APACHE.MOD_PERL2\nhpuxws22APACHE.PHP\nhpuxws22APACHE.PHP2\nhpuxws22APACHE.WEBPROXY\nhpuxws22APACHE.WEBPROXY2\naction: install revision B.2.2.15.13 or subsequent\n\nHP-UX B.11.31\n==================\nhpuxws22APCH32.APACHE\nhpuxws22APCH32.APACHE2\nhpuxws22APCH32.AUTH_LDAP\nhpuxws22APCH32.AUTH_LDAP2\nhpuxws22APCH32.MOD_JK\nhpuxws22APCH32.MOD_JK2\nhpuxws22APCH32.MOD_PERL\nhpuxws22APCH32.MOD_PERL2\nhpuxws22APCH32.PHP\nhpuxws22APCH32.PHP2\nhpuxws22APCH32.WEBPROXY\nhpuxws22APCH32.WEBPROXY2\nhpuxws22APACHE.APACHE\nhpuxws22APACHE.APACHE2\nhpuxws22APACHE.AUTH_LDAP\nhpuxws22APACHE.AUTH_LDAP2\nhpuxws22APACHE.MOD_JK\nhpuxws22APACHE.MOD_JK2\nhpuxws22APACHE.MOD_PERL\nhpuxws22APACHE.MOD_PERL2\nhpuxws22APACHE.PHP\nhpuxws22APACHE.PHP2\nhpuxws22APACHE.WEBPROXY\nhpuxws22APACHE.WEBPROXY2\n\naction: install revision B.2.2.15.13 or subsequent\n\nEND AFFECTED VERSIONS\n\nHISTORY\nVersion:1 (rev.1) - 14 June 2012 Initial release\n\nThird Party Security Patches: Third party security patches that are to be\ninstalled on systems running HP software products should be applied in\naccordance with the customer\u0027s patch management policy. \n\nSupport: For issues about implementing the recommendations of this Security\nBulletin, contact normal HP Services support channel. For other issues about\nthe content of this Security Bulletin, send e-mail to security-alert@hp.com. \n\nReport: To report a potential security vulnerability with any HP supported\nproduct, send Email to: security-alert@hp.com\n\nSubscribe: To initiate a subscription to receive future HP Security Bulletin\nalerts via Email:\nhttp://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins\n\nSecurity Bulletin List: A list of HP Security Bulletins, updated\nperiodically, is contained in HP Security Notice HPSN-2011-001:\nhttps://h20566.www2.hp.com/portal/site/hpsc/public/kb/\ndocDisplay?docId=emr_na-c02964430\n\nSecurity Bulletin Archive: A list of recently released Security Bulletins is\navailable here:\nhttp://h20566.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/\n\nSoftware Product Category: The Software Product Category is represented in\nthe title by the two characters following HPSB. \n\n3C = 3COM\n3P = 3rd Party Software\nGN = HP General Software\nHF = HP Hardware and Firmware\nMP = MPE/iX\nMU = Multi-Platform Software\nNS = NonStop Servers\nOV = OpenVMS\nPI = Printing and Imaging\nPV = ProCurve\nST = Storage Software\nTU = Tru64 UNIX\nUX = HP-UX\n\nCopyright 2012 Hewlett-Packard Development Company, L.P. \nHewlett-Packard Company shall not be liable for technical or editorial errors\nor omissions contained herein. The information provided is provided \"as is\"\nwithout warranty of any kind. To the extent permitted by law, neither HP or\nits affiliates, subcontractors or suppliers will be liable for\nincidental,special or consequential damages including downtime cost; lost\nprofits;damages relating to the procurement of substitute products or\nservices; or damages for loss of data, or software restoration. The\ninformation in this document is subject to change without notice. \nHewlett-Packard Company and the names of Hewlett-Packard products referenced\nherein are trademarks of Hewlett-Packard Company in the United States and\nother countries. Other product and company names mentioned herein may be\ntrademarks of their respective owners. Relevant releases/architectures:\n\nRHEL Desktop Workstation (v. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n Red Hat Security Advisory\n\nSynopsis: Critical: php security update\nAdvisory ID: RHSA-2012:0568-01\nProduct: Red Hat Enterprise Linux\nAdvisory URL: https://rhn.redhat.com/errata/RHSA-2012-0568.html\nIssue date: 2012-05-10\nCVE Names: CVE-2012-1823 \n=====================================================================\n\n1. Summary:\n\nUpdated php packages that fix one security issue are now available for\nRed Hat Enterprise Linux 5.3 Long Life, and Red Hat Enterprise Linux 5.6,\n6.0 and 6.1 Extended Update Support. \n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux EUS (v. 5.6 server) - i386, ia64, ppc, s390x, x86_64\nRed Hat Enterprise Linux Long Life (v. 5.3 server) - i386, ia64, x86_64\nRed Hat Enterprise Linux Server EUS (v. 6.0) - i386, ppc64, s390x, x86_64\nRed Hat Enterprise Linux Server EUS (v. 6.1) - i386, ppc64, s390x, x86_64\nRed Hat Enterprise Linux Server Optional EUS (v. 6.0) - i386, ppc64, s390x, x86_64\nRed Hat Enterprise Linux Server Optional EUS (v. 6.1) - i386, ppc64, s390x, x86_64\n\n3. Description:\n\nPHP is an HTML-embedded scripting language commonly used with the Apache\nHTTP Server. \n\nA flaw was found in the way the php-cgi executable processed command line\narguments when running in CGI mode. This\ncould lead to the disclosure of the script\u0027s source code or arbitrary code\nexecution with the privileges of the PHP interpreter. (CVE-2012-1823)\n\nRed Hat is aware that a public exploit for this issue is available that\nallows remote code execution in affected PHP CGI configurations. This flaw\ndoes not affect the default configuration in Red Hat Enterprise Linux 5 and\n6 using the PHP module for Apache httpd to handle PHP scripts. \n\nAll php users should upgrade to these updated packages, which contain a\nbackported patch to resolve this issue. After installing the updated\npackages, the httpd daemon must be restarted for the update to take effect. \n\n4. Solution:\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied. \n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258\n\n5. Bugs fixed (http://bugzilla.redhat.com/):\n\n818607 - CVE-2012-1823 php: command line arguments injection when run in CGI mode (VU#520827)\n\n6. Package List:\n\nRed Hat Enterprise Linux Long Life (v. 5.3 server):\n\nSource:\nphp-5.1.6-23.3.el5_3.src.rpm\n\ni386:\nphp-5.1.6-23.3.el5_3.i386.rpm\nphp-bcmath-5.1.6-23.3.el5_3.i386.rpm\nphp-cli-5.1.6-23.3.el5_3.i386.rpm\nphp-common-5.1.6-23.3.el5_3.i386.rpm\nphp-dba-5.1.6-23.3.el5_3.i386.rpm\nphp-debuginfo-5.1.6-23.3.el5_3.i386.rpm\nphp-devel-5.1.6-23.3.el5_3.i386.rpm\nphp-gd-5.1.6-23.3.el5_3.i386.rpm\nphp-imap-5.1.6-23.3.el5_3.i386.rpm\nphp-ldap-5.1.6-23.3.el5_3.i386.rpm\nphp-mbstring-5.1.6-23.3.el5_3.i386.rpm\nphp-mysql-5.1.6-23.3.el5_3.i386.rpm\nphp-ncurses-5.1.6-23.3.el5_3.i386.rpm\nphp-odbc-5.1.6-23.3.el5_3.i386.rpm\nphp-pdo-5.1.6-23.3.el5_3.i386.rpm\nphp-pgsql-5.1.6-23.3.el5_3.i386.rpm\nphp-snmp-5.1.6-23.3.el5_3.i386.rpm\nphp-soap-5.1.6-23.3.el5_3.i386.rpm\nphp-xml-5.1.6-23.3.el5_3.i386.rpm\nphp-xmlrpc-5.1.6-23.3.el5_3.i386.rpm\n\nia64:\nphp-5.1.6-23.3.el5_3.ia64.rpm\nphp-bcmath-5.1.6-23.3.el5_3.ia64.rpm\nphp-cli-5.1.6-23.3.el5_3.ia64.rpm\nphp-common-5.1.6-23.3.el5_3.ia64.rpm\nphp-dba-5.1.6-23.3.el5_3.ia64.rpm\nphp-debuginfo-5.1.6-23.3.el5_3.ia64.rpm\nphp-devel-5.1.6-23.3.el5_3.ia64.rpm\nphp-gd-5.1.6-23.3.el5_3.ia64.rpm\nphp-imap-5.1.6-23.3.el5_3.ia64.rpm\nphp-ldap-5.1.6-23.3.el5_3.ia64.rpm\nphp-mbstring-5.1.6-23.3.el5_3.ia64.rpm\nphp-mysql-5.1.6-23.3.el5_3.ia64.rpm\nphp-ncurses-5.1.6-23.3.el5_3.ia64.rpm\nphp-odbc-5.1.6-23.3.el5_3.ia64.rpm\nphp-pdo-5.1.6-23.3.el5_3.ia64.rpm\nphp-pgsql-5.1.6-23.3.el5_3.ia64.rpm\nphp-snmp-5.1.6-23.3.el5_3.ia64.rpm\nphp-soap-5.1.6-23.3.el5_3.ia64.rpm\nphp-xml-5.1.6-23.3.el5_3.ia64.rpm\nphp-xmlrpc-5.1.6-23.3.el5_3.ia64.rpm\n\nx86_64:\nphp-5.1.6-23.3.el5_3.x86_64.rpm\nphp-bcmath-5.1.6-23.3.el5_3.x86_64.rpm\nphp-cli-5.1.6-23.3.el5_3.x86_64.rpm\nphp-common-5.1.6-23.3.el5_3.x86_64.rpm\nphp-dba-5.1.6-23.3.el5_3.x86_64.rpm\nphp-debuginfo-5.1.6-23.3.el5_3.x86_64.rpm\nphp-devel-5.1.6-23.3.el5_3.x86_64.rpm\nphp-gd-5.1.6-23.3.el5_3.x86_64.rpm\nphp-imap-5.1.6-23.3.el5_3.x86_64.rpm\nphp-ldap-5.1.6-23.3.el5_3.x86_64.rpm\nphp-mbstring-5.1.6-23.3.el5_3.x86_64.rpm\nphp-mysql-5.1.6-23.3.el5_3.x86_64.rpm\nphp-ncurses-5.1.6-23.3.el5_3.x86_64.rpm\nphp-odbc-5.1.6-23.3.el5_3.x86_64.rpm\nphp-pdo-5.1.6-23.3.el5_3.x86_64.rpm\nphp-pgsql-5.1.6-23.3.el5_3.x86_64.rpm\nphp-snmp-5.1.6-23.3.el5_3.x86_64.rpm\nphp-soap-5.1.6-23.3.el5_3.x86_64.rpm\nphp-xml-5.1.6-23.3.el5_3.x86_64.rpm\nphp-xmlrpc-5.1.6-23.3.el5_3.x86_64.rpm\n\nRed Hat Enterprise Linux EUS (v. 5.6 server):\n\nSource:\nphp-5.1.6-27.el5_6.4.src.rpm\n\ni386:\nphp-5.1.6-27.el5_6.4.i386.rpm\nphp-bcmath-5.1.6-27.el5_6.4.i386.rpm\nphp-cli-5.1.6-27.el5_6.4.i386.rpm\nphp-common-5.1.6-27.el5_6.4.i386.rpm\nphp-dba-5.1.6-27.el5_6.4.i386.rpm\nphp-debuginfo-5.1.6-27.el5_6.4.i386.rpm\nphp-devel-5.1.6-27.el5_6.4.i386.rpm\nphp-gd-5.1.6-27.el5_6.4.i386.rpm\nphp-imap-5.1.6-27.el5_6.4.i386.rpm\nphp-ldap-5.1.6-27.el5_6.4.i386.rpm\nphp-mbstring-5.1.6-27.el5_6.4.i386.rpm\nphp-mysql-5.1.6-27.el5_6.4.i386.rpm\nphp-ncurses-5.1.6-27.el5_6.4.i386.rpm\nphp-odbc-5.1.6-27.el5_6.4.i386.rpm\nphp-pdo-5.1.6-27.el5_6.4.i386.rpm\nphp-pgsql-5.1.6-27.el5_6.4.i386.rpm\nphp-snmp-5.1.6-27.el5_6.4.i386.rpm\nphp-soap-5.1.6-27.el5_6.4.i386.rpm\nphp-xml-5.1.6-27.el5_6.4.i386.rpm\nphp-xmlrpc-5.1.6-27.el5_6.4.i386.rpm\n\nia64:\nphp-5.1.6-27.el5_6.4.ia64.rpm\nphp-bcmath-5.1.6-27.el5_6.4.ia64.rpm\nphp-cli-5.1.6-27.el5_6.4.ia64.rpm\nphp-common-5.1.6-27.el5_6.4.ia64.rpm\nphp-dba-5.1.6-27.el5_6.4.ia64.rpm\nphp-debuginfo-5.1.6-27.el5_6.4.ia64.rpm\nphp-devel-5.1.6-27.el5_6.4.ia64.rpm\nphp-gd-5.1.6-27.el5_6.4.ia64.rpm\nphp-imap-5.1.6-27.el5_6.4.ia64.rpm\nphp-ldap-5.1.6-27.el5_6.4.ia64.rpm\nphp-mbstring-5.1.6-27.el5_6.4.ia64.rpm\nphp-mysql-5.1.6-27.el5_6.4.ia64.rpm\nphp-ncurses-5.1.6-27.el5_6.4.ia64.rpm\nphp-odbc-5.1.6-27.el5_6.4.ia64.rpm\nphp-pdo-5.1.6-27.el5_6.4.ia64.rpm\nphp-pgsql-5.1.6-27.el5_6.4.ia64.rpm\nphp-snmp-5.1.6-27.el5_6.4.ia64.rpm\nphp-soap-5.1.6-27.el5_6.4.ia64.rpm\nphp-xml-5.1.6-27.el5_6.4.ia64.rpm\nphp-xmlrpc-5.1.6-27.el5_6.4.ia64.rpm\n\nppc:\nphp-5.1.6-27.el5_6.4.ppc.rpm\nphp-bcmath-5.1.6-27.el5_6.4.ppc.rpm\nphp-cli-5.1.6-27.el5_6.4.ppc.rpm\nphp-common-5.1.6-27.el5_6.4.ppc.rpm\nphp-dba-5.1.6-27.el5_6.4.ppc.rpm\nphp-debuginfo-5.1.6-27.el5_6.4.ppc.rpm\nphp-devel-5.1.6-27.el5_6.4.ppc.rpm\nphp-gd-5.1.6-27.el5_6.4.ppc.rpm\nphp-imap-5.1.6-27.el5_6.4.ppc.rpm\nphp-ldap-5.1.6-27.el5_6.4.ppc.rpm\nphp-mbstring-5.1.6-27.el5_6.4.ppc.rpm\nphp-mysql-5.1.6-27.el5_6.4.ppc.rpm\nphp-ncurses-5.1.6-27.el5_6.4.ppc.rpm\nphp-odbc-5.1.6-27.el5_6.4.ppc.rpm\nphp-pdo-5.1.6-27.el5_6.4.ppc.rpm\nphp-pgsql-5.1.6-27.el5_6.4.ppc.rpm\nphp-snmp-5.1.6-27.el5_6.4.ppc.rpm\nphp-soap-5.1.6-27.el5_6.4.ppc.rpm\nphp-xml-5.1.6-27.el5_6.4.ppc.rpm\nphp-xmlrpc-5.1.6-27.el5_6.4.ppc.rpm\n\ns390x:\nphp-5.1.6-27.el5_6.4.s390x.rpm\nphp-bcmath-5.1.6-27.el5_6.4.s390x.rpm\nphp-cli-5.1.6-27.el5_6.4.s390x.rpm\nphp-common-5.1.6-27.el5_6.4.s390x.rpm\nphp-dba-5.1.6-27.el5_6.4.s390x.rpm\nphp-debuginfo-5.1.6-27.el5_6.4.s390x.rpm\nphp-devel-5.1.6-27.el5_6.4.s390x.rpm\nphp-gd-5.1.6-27.el5_6.4.s390x.rpm\nphp-imap-5.1.6-27.el5_6.4.s390x.rpm\nphp-ldap-5.1.6-27.el5_6.4.s390x.rpm\nphp-mbstring-5.1.6-27.el5_6.4.s390x.rpm\nphp-mysql-5.1.6-27.el5_6.4.s390x.rpm\nphp-ncurses-5.1.6-27.el5_6.4.s390x.rpm\nphp-odbc-5.1.6-27.el5_6.4.s390x.rpm\nphp-pdo-5.1.6-27.el5_6.4.s390x.rpm\nphp-pgsql-5.1.6-27.el5_6.4.s390x.rpm\nphp-snmp-5.1.6-27.el5_6.4.s390x.rpm\nphp-soap-5.1.6-27.el5_6.4.s390x.rpm\nphp-xml-5.1.6-27.el5_6.4.s390x.rpm\nphp-xmlrpc-5.1.6-27.el5_6.4.s390x.rpm\n\nx86_64:\nphp-5.1.6-27.el5_6.4.x86_64.rpm\nphp-bcmath-5.1.6-27.el5_6.4.x86_64.rpm\nphp-cli-5.1.6-27.el5_6.4.x86_64.rpm\nphp-common-5.1.6-27.el5_6.4.x86_64.rpm\nphp-dba-5.1.6-27.el5_6.4.x86_64.rpm\nphp-debuginfo-5.1.6-27.el5_6.4.x86_64.rpm\nphp-devel-5.1.6-27.el5_6.4.x86_64.rpm\nphp-gd-5.1.6-27.el5_6.4.x86_64.rpm\nphp-imap-5.1.6-27.el5_6.4.x86_64.rpm\nphp-ldap-5.1.6-27.el5_6.4.x86_64.rpm\nphp-mbstring-5.1.6-27.el5_6.4.x86_64.rpm\nphp-mysql-5.1.6-27.el5_6.4.x86_64.rpm\nphp-ncurses-5.1.6-27.el5_6.4.x86_64.rpm\nphp-odbc-5.1.6-27.el5_6.4.x86_64.rpm\nphp-pdo-5.1.6-27.el5_6.4.x86_64.rpm\nphp-pgsql-5.1.6-27.el5_6.4.x86_64.rpm\nphp-snmp-5.1.6-27.el5_6.4.x86_64.rpm\nphp-soap-5.1.6-27.el5_6.4.x86_64.rpm\nphp-xml-5.1.6-27.el5_6.4.x86_64.rpm\nphp-xmlrpc-5.1.6-27.el5_6.4.x86_64.rpm\n\nRed Hat Enterprise Linux Server EUS (v. 6.0):\n\nSource:\nphp-5.3.2-6.el6_0.2.src.rpm\n\ni386:\nphp-5.3.2-6.el6_0.2.i686.rpm\nphp-cli-5.3.2-6.el6_0.2.i686.rpm\nphp-common-5.3.2-6.el6_0.2.i686.rpm\nphp-debuginfo-5.3.2-6.el6_0.2.i686.rpm\nphp-gd-5.3.2-6.el6_0.2.i686.rpm\nphp-ldap-5.3.2-6.el6_0.2.i686.rpm\nphp-mysql-5.3.2-6.el6_0.2.i686.rpm\nphp-odbc-5.3.2-6.el6_0.2.i686.rpm\nphp-pdo-5.3.2-6.el6_0.2.i686.rpm\nphp-pgsql-5.3.2-6.el6_0.2.i686.rpm\nphp-soap-5.3.2-6.el6_0.2.i686.rpm\nphp-xml-5.3.2-6.el6_0.2.i686.rpm\nphp-xmlrpc-5.3.2-6.el6_0.2.i686.rpm\n\nppc64:\nphp-5.3.2-6.el6_0.2.ppc64.rpm\nphp-cli-5.3.2-6.el6_0.2.ppc64.rpm\nphp-common-5.3.2-6.el6_0.2.ppc64.rpm\nphp-debuginfo-5.3.2-6.el6_0.2.ppc64.rpm\nphp-gd-5.3.2-6.el6_0.2.ppc64.rpm\nphp-ldap-5.3.2-6.el6_0.2.ppc64.rpm\nphp-mysql-5.3.2-6.el6_0.2.ppc64.rpm\nphp-odbc-5.3.2-6.el6_0.2.ppc64.rpm\nphp-pdo-5.3.2-6.el6_0.2.ppc64.rpm\nphp-pgsql-5.3.2-6.el6_0.2.ppc64.rpm\nphp-soap-5.3.2-6.el6_0.2.ppc64.rpm\nphp-xml-5.3.2-6.el6_0.2.ppc64.rpm\nphp-xmlrpc-5.3.2-6.el6_0.2.ppc64.rpm\n\ns390x:\nphp-5.3.2-6.el6_0.2.s390x.rpm\nphp-cli-5.3.2-6.el6_0.2.s390x.rpm\nphp-common-5.3.2-6.el6_0.2.s390x.rpm\nphp-debuginfo-5.3.2-6.el6_0.2.s390x.rpm\nphp-gd-5.3.2-6.el6_0.2.s390x.rpm\nphp-ldap-5.3.2-6.el6_0.2.s390x.rpm\nphp-mysql-5.3.2-6.el6_0.2.s390x.rpm\nphp-odbc-5.3.2-6.el6_0.2.s390x.rpm\nphp-pdo-5.3.2-6.el6_0.2.s390x.rpm\nphp-pgsql-5.3.2-6.el6_0.2.s390x.rpm\nphp-soap-5.3.2-6.el6_0.2.s390x.rpm\nphp-xml-5.3.2-6.el6_0.2.s390x.rpm\nphp-xmlrpc-5.3.2-6.el6_0.2.s390x.rpm\n\nx86_64:\nphp-5.3.2-6.el6_0.2.x86_64.rpm\nphp-cli-5.3.2-6.el6_0.2.x86_64.rpm\nphp-common-5.3.2-6.el6_0.2.x86_64.rpm\nphp-debuginfo-5.3.2-6.el6_0.2.x86_64.rpm\nphp-gd-5.3.2-6.el6_0.2.x86_64.rpm\nphp-ldap-5.3.2-6.el6_0.2.x86_64.rpm\nphp-mysql-5.3.2-6.el6_0.2.x86_64.rpm\nphp-odbc-5.3.2-6.el6_0.2.x86_64.rpm\nphp-pdo-5.3.2-6.el6_0.2.x86_64.rpm\nphp-pgsql-5.3.2-6.el6_0.2.x86_64.rpm\nphp-soap-5.3.2-6.el6_0.2.x86_64.rpm\nphp-xml-5.3.2-6.el6_0.2.x86_64.rpm\nphp-xmlrpc-5.3.2-6.el6_0.2.x86_64.rpm\n\nRed Hat Enterprise Linux Server EUS (v. 6.1):\n\nSource:\nphp-5.3.3-3.el6_1.4.src.rpm\n\ni386:\nphp-5.3.3-3.el6_1.4.i686.rpm\nphp-cli-5.3.3-3.el6_1.4.i686.rpm\nphp-common-5.3.3-3.el6_1.4.i686.rpm\nphp-debuginfo-5.3.3-3.el6_1.4.i686.rpm\nphp-gd-5.3.3-3.el6_1.4.i686.rpm\nphp-ldap-5.3.3-3.el6_1.4.i686.rpm\nphp-mysql-5.3.3-3.el6_1.4.i686.rpm\nphp-odbc-5.3.3-3.el6_1.4.i686.rpm\nphp-pdo-5.3.3-3.el6_1.4.i686.rpm\nphp-pgsql-5.3.3-3.el6_1.4.i686.rpm\nphp-soap-5.3.3-3.el6_1.4.i686.rpm\nphp-xml-5.3.3-3.el6_1.4.i686.rpm\nphp-xmlrpc-5.3.3-3.el6_1.4.i686.rpm\n\nppc64:\nphp-5.3.3-3.el6_1.4.ppc64.rpm\nphp-cli-5.3.3-3.el6_1.4.ppc64.rpm\nphp-common-5.3.3-3.el6_1.4.ppc64.rpm\nphp-debuginfo-5.3.3-3.el6_1.4.ppc64.rpm\nphp-gd-5.3.3-3.el6_1.4.ppc64.rpm\nphp-ldap-5.3.3-3.el6_1.4.ppc64.rpm\nphp-mysql-5.3.3-3.el6_1.4.ppc64.rpm\nphp-odbc-5.3.3-3.el6_1.4.ppc64.rpm\nphp-pdo-5.3.3-3.el6_1.4.ppc64.rpm\nphp-pgsql-5.3.3-3.el6_1.4.ppc64.rpm\nphp-soap-5.3.3-3.el6_1.4.ppc64.rpm\nphp-xml-5.3.3-3.el6_1.4.ppc64.rpm\nphp-xmlrpc-5.3.3-3.el6_1.4.ppc64.rpm\n\ns390x:\nphp-5.3.3-3.el6_1.4.s390x.rpm\nphp-cli-5.3.3-3.el6_1.4.s390x.rpm\nphp-common-5.3.3-3.el6_1.4.s390x.rpm\nphp-debuginfo-5.3.3-3.el6_1.4.s390x.rpm\nphp-gd-5.3.3-3.el6_1.4.s390x.rpm\nphp-ldap-5.3.3-3.el6_1.4.s390x.rpm\nphp-mysql-5.3.3-3.el6_1.4.s390x.rpm\nphp-odbc-5.3.3-3.el6_1.4.s390x.rpm\nphp-pdo-5.3.3-3.el6_1.4.s390x.rpm\nphp-pgsql-5.3.3-3.el6_1.4.s390x.rpm\nphp-soap-5.3.3-3.el6_1.4.s390x.rpm\nphp-xml-5.3.3-3.el6_1.4.s390x.rpm\nphp-xmlrpc-5.3.3-3.el6_1.4.s390x.rpm\n\nx86_64:\nphp-5.3.3-3.el6_1.4.x86_64.rpm\nphp-cli-5.3.3-3.el6_1.4.x86_64.rpm\nphp-common-5.3.3-3.el6_1.4.x86_64.rpm\nphp-debuginfo-5.3.3-3.el6_1.4.x86_64.rpm\nphp-gd-5.3.3-3.el6_1.4.x86_64.rpm\nphp-ldap-5.3.3-3.el6_1.4.x86_64.rpm\nphp-mysql-5.3.3-3.el6_1.4.x86_64.rpm\nphp-odbc-5.3.3-3.el6_1.4.x86_64.rpm\nphp-pdo-5.3.3-3.el6_1.4.x86_64.rpm\nphp-pgsql-5.3.3-3.el6_1.4.x86_64.rpm\nphp-soap-5.3.3-3.el6_1.4.x86_64.rpm\nphp-xml-5.3.3-3.el6_1.4.x86_64.rpm\nphp-xmlrpc-5.3.3-3.el6_1.4.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional EUS (v. 6.0):\n\nSource:\nphp-5.3.2-6.el6_0.2.src.rpm\n\ni386:\nphp-bcmath-5.3.2-6.el6_0.2.i686.rpm\nphp-dba-5.3.2-6.el6_0.2.i686.rpm\nphp-debuginfo-5.3.2-6.el6_0.2.i686.rpm\nphp-devel-5.3.2-6.el6_0.2.i686.rpm\nphp-embedded-5.3.2-6.el6_0.2.i686.rpm\nphp-enchant-5.3.2-6.el6_0.2.i686.rpm\nphp-imap-5.3.2-6.el6_0.2.i686.rpm\nphp-intl-5.3.2-6.el6_0.2.i686.rpm\nphp-mbstring-5.3.2-6.el6_0.2.i686.rpm\nphp-process-5.3.2-6.el6_0.2.i686.rpm\nphp-pspell-5.3.2-6.el6_0.2.i686.rpm\nphp-recode-5.3.2-6.el6_0.2.i686.rpm\nphp-snmp-5.3.2-6.el6_0.2.i686.rpm\nphp-tidy-5.3.2-6.el6_0.2.i686.rpm\nphp-zts-5.3.2-6.el6_0.2.i686.rpm\n\nppc64:\nphp-bcmath-5.3.2-6.el6_0.2.ppc64.rpm\nphp-dba-5.3.2-6.el6_0.2.ppc64.rpm\nphp-debuginfo-5.3.2-6.el6_0.2.ppc64.rpm\nphp-devel-5.3.2-6.el6_0.2.ppc64.rpm\nphp-embedded-5.3.2-6.el6_0.2.ppc64.rpm\nphp-enchant-5.3.2-6.el6_0.2.ppc64.rpm\nphp-imap-5.3.2-6.el6_0.2.ppc64.rpm\nphp-intl-5.3.2-6.el6_0.2.ppc64.rpm\nphp-mbstring-5.3.2-6.el6_0.2.ppc64.rpm\nphp-process-5.3.2-6.el6_0.2.ppc64.rpm\nphp-pspell-5.3.2-6.el6_0.2.ppc64.rpm\nphp-recode-5.3.2-6.el6_0.2.ppc64.rpm\nphp-snmp-5.3.2-6.el6_0.2.ppc64.rpm\nphp-tidy-5.3.2-6.el6_0.2.ppc64.rpm\nphp-zts-5.3.2-6.el6_0.2.ppc64.rpm\n\ns390x:\nphp-bcmath-5.3.2-6.el6_0.2.s390x.rpm\nphp-dba-5.3.2-6.el6_0.2.s390x.rpm\nphp-debuginfo-5.3.2-6.el6_0.2.s390x.rpm\nphp-devel-5.3.2-6.el6_0.2.s390x.rpm\nphp-embedded-5.3.2-6.el6_0.2.s390x.rpm\nphp-enchant-5.3.2-6.el6_0.2.s390x.rpm\nphp-imap-5.3.2-6.el6_0.2.s390x.rpm\nphp-intl-5.3.2-6.el6_0.2.s390x.rpm\nphp-mbstring-5.3.2-6.el6_0.2.s390x.rpm\nphp-process-5.3.2-6.el6_0.2.s390x.rpm\nphp-pspell-5.3.2-6.el6_0.2.s390x.rpm\nphp-recode-5.3.2-6.el6_0.2.s390x.rpm\nphp-snmp-5.3.2-6.el6_0.2.s390x.rpm\nphp-tidy-5.3.2-6.el6_0.2.s390x.rpm\nphp-zts-5.3.2-6.el6_0.2.s390x.rpm\n\nx86_64:\nphp-bcmath-5.3.2-6.el6_0.2.x86_64.rpm\nphp-dba-5.3.2-6.el6_0.2.x86_64.rpm\nphp-debuginfo-5.3.2-6.el6_0.2.x86_64.rpm\nphp-devel-5.3.2-6.el6_0.2.x86_64.rpm\nphp-embedded-5.3.2-6.el6_0.2.x86_64.rpm\nphp-enchant-5.3.2-6.el6_0.2.x86_64.rpm\nphp-imap-5.3.2-6.el6_0.2.x86_64.rpm\nphp-intl-5.3.2-6.el6_0.2.x86_64.rpm\nphp-mbstring-5.3.2-6.el6_0.2.x86_64.rpm\nphp-process-5.3.2-6.el6_0.2.x86_64.rpm\nphp-pspell-5.3.2-6.el6_0.2.x86_64.rpm\nphp-recode-5.3.2-6.el6_0.2.x86_64.rpm\nphp-snmp-5.3.2-6.el6_0.2.x86_64.rpm\nphp-tidy-5.3.2-6.el6_0.2.x86_64.rpm\nphp-zts-5.3.2-6.el6_0.2.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional EUS (v. 6.1):\n\nSource:\nphp-5.3.3-3.el6_1.4.src.rpm\n\ni386:\nphp-bcmath-5.3.3-3.el6_1.4.i686.rpm\nphp-dba-5.3.3-3.el6_1.4.i686.rpm\nphp-debuginfo-5.3.3-3.el6_1.4.i686.rpm\nphp-devel-5.3.3-3.el6_1.4.i686.rpm\nphp-embedded-5.3.3-3.el6_1.4.i686.rpm\nphp-enchant-5.3.3-3.el6_1.4.i686.rpm\nphp-imap-5.3.3-3.el6_1.4.i686.rpm\nphp-intl-5.3.3-3.el6_1.4.i686.rpm\nphp-mbstring-5.3.3-3.el6_1.4.i686.rpm\nphp-process-5.3.3-3.el6_1.4.i686.rpm\nphp-pspell-5.3.3-3.el6_1.4.i686.rpm\nphp-recode-5.3.3-3.el6_1.4.i686.rpm\nphp-snmp-5.3.3-3.el6_1.4.i686.rpm\nphp-tidy-5.3.3-3.el6_1.4.i686.rpm\nphp-zts-5.3.3-3.el6_1.4.i686.rpm\n\nppc64:\nphp-bcmath-5.3.3-3.el6_1.4.ppc64.rpm\nphp-dba-5.3.3-3.el6_1.4.ppc64.rpm\nphp-debuginfo-5.3.3-3.el6_1.4.ppc64.rpm\nphp-devel-5.3.3-3.el6_1.4.ppc64.rpm\nphp-embedded-5.3.3-3.el6_1.4.ppc64.rpm\nphp-enchant-5.3.3-3.el6_1.4.ppc64.rpm\nphp-imap-5.3.3-3.el6_1.4.ppc64.rpm\nphp-intl-5.3.3-3.el6_1.4.ppc64.rpm\nphp-mbstring-5.3.3-3.el6_1.4.ppc64.rpm\nphp-process-5.3.3-3.el6_1.4.ppc64.rpm\nphp-pspell-5.3.3-3.el6_1.4.ppc64.rpm\nphp-recode-5.3.3-3.el6_1.4.ppc64.rpm\nphp-snmp-5.3.3-3.el6_1.4.ppc64.rpm\nphp-tidy-5.3.3-3.el6_1.4.ppc64.rpm\nphp-zts-5.3.3-3.el6_1.4.ppc64.rpm\n\ns390x:\nphp-bcmath-5.3.3-3.el6_1.4.s390x.rpm\nphp-dba-5.3.3-3.el6_1.4.s390x.rpm\nphp-debuginfo-5.3.3-3.el6_1.4.s390x.rpm\nphp-devel-5.3.3-3.el6_1.4.s390x.rpm\nphp-embedded-5.3.3-3.el6_1.4.s390x.rpm\nphp-enchant-5.3.3-3.el6_1.4.s390x.rpm\nphp-imap-5.3.3-3.el6_1.4.s390x.rpm\nphp-intl-5.3.3-3.el6_1.4.s390x.rpm\nphp-mbstring-5.3.3-3.el6_1.4.s390x.rpm\nphp-process-5.3.3-3.el6_1.4.s390x.rpm\nphp-pspell-5.3.3-3.el6_1.4.s390x.rpm\nphp-recode-5.3.3-3.el6_1.4.s390x.rpm\nphp-snmp-5.3.3-3.el6_1.4.s390x.rpm\nphp-tidy-5.3.3-3.el6_1.4.s390x.rpm\nphp-zts-5.3.3-3.el6_1.4.s390x.rpm\n\nx86_64:\nphp-bcmath-5.3.3-3.el6_1.4.x86_64.rpm\nphp-dba-5.3.3-3.el6_1.4.x86_64.rpm\nphp-debuginfo-5.3.3-3.el6_1.4.x86_64.rpm\nphp-devel-5.3.3-3.el6_1.4.x86_64.rpm\nphp-embedded-5.3.3-3.el6_1.4.x86_64.rpm\nphp-enchant-5.3.3-3.el6_1.4.x86_64.rpm\nphp-imap-5.3.3-3.el6_1.4.x86_64.rpm\nphp-intl-5.3.3-3.el6_1.4.x86_64.rpm\nphp-mbstring-5.3.3-3.el6_1.4.x86_64.rpm\nphp-process-5.3.3-3.el6_1.4.x86_64.rpm\nphp-pspell-5.3.3-3.el6_1.4.x86_64.rpm\nphp-recode-5.3.3-3.el6_1.4.x86_64.rpm\nphp-snmp-5.3.3-3.el6_1.4.x86_64.rpm\nphp-tidy-5.3.3-3.el6_1.4.x86_64.rpm\nphp-zts-5.3.3-3.el6_1.4.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/#package\n\n7. References:\n\nhttps://www.redhat.com/security/data/cve/CVE-2012-1823.html\nhttps://access.redhat.com/security/updates/classification/#critical\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2012 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.4 (GNU/Linux)\n\niD8DBQFPq+BrXlSAg2UNWIIRAlkPAJ99QQuun9ljsbFTsnMoLAbItDTJUQCggigr\nNQJBwTDuCJX2FNa8cSIcWCY=\n=s0aa\n-----END PGP SIGNATURE-----\n\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. Content-Disposition: inline\n\n==========================================================================Ubuntu Security Notice USN-1437-1\nMay 04, 2012\n\nphp5 vulnerability\n==========================================================================\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 12.04 LTS\n- Ubuntu 11.10\n- Ubuntu 11.04\n- Ubuntu 10.04 LTS\n- Ubuntu 8.04 LTS\n\nSummary:\n\nStandalone PHP CGI scripts could be made to execute arbitrary code with\nthe privilege of the web server. Configurations using\nmod_php5 and FastCGI were not vulnerable. Please see\nhttp://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-2311.html\nfor more details and potential mitigation approaches. \n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 12.04 LTS:\n php5-cgi 5.3.10-1ubuntu3.1\n\nUbuntu 11.10:\n php5-cgi 5.3.6-13ubuntu3.7\n\nUbuntu 11.04:\n php5-cgi 5.3.5-1ubuntu7.8\n\nUbuntu 10.04 LTS:\n php5-cgi 5.3.2-1ubuntu4.15\n\nUbuntu 8.04 LTS:\n php5-cgi 5.2.4-2ubuntu5.24\n\nIn general, a standard system update will make all the necessary changes",
"sources": [
{
"db": "NVD",
"id": "CVE-2012-1823"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002235"
},
{
"db": "BID",
"id": "53388"
},
{
"db": "VULMON",
"id": "CVE-2012-1823"
},
{
"db": "PACKETSTORM",
"id": "112515"
},
{
"db": "PACKETSTORM",
"id": "114272"
},
{
"db": "PACKETSTORM",
"id": "112580"
},
{
"db": "PACKETSTORM",
"id": "113905"
},
{
"db": "PACKETSTORM",
"id": "112508"
},
{
"db": "PACKETSTORM",
"id": "112605"
},
{
"db": "PACKETSTORM",
"id": "112474"
}
],
"trust": 2.61
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=18836",
"trust": 0.4,
"type": "exploit"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2012-1823"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2012-1823",
"trust": 2.8
},
{
"db": "CERT/CC",
"id": "VU#520827",
"trust": 2.2
},
{
"db": "CERT/CC",
"id": "VU#673343",
"trust": 1.4
},
{
"db": "SECUNIA",
"id": "49014",
"trust": 1.1
},
{
"db": "SECUNIA",
"id": "49065",
"trust": 1.1
},
{
"db": "SECUNIA",
"id": "49085",
"trust": 1.1
},
{
"db": "SECUNIA",
"id": "49087",
"trust": 1.1
},
{
"db": "SECTRACK",
"id": "1027022",
"trust": 1.1
},
{
"db": "OPENWALL",
"id": "OSS-SECURITY/2024/06/07/1",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002235",
"trust": 0.8
},
{
"db": "JUNIPER",
"id": "JSA10658",
"trust": 0.3
},
{
"db": "BID",
"id": "53388",
"trust": 0.3
},
{
"db": "EXPLOIT-DB",
"id": "18836",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2012-1823",
"trust": 0.1
},
{
"db": "SECUNIA",
"id": "49097",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "112515",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "114272",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "112580",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "113905",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "112508",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "112605",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "112474",
"trust": 0.1
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2012-1823"
},
{
"db": "BID",
"id": "53388"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002235"
},
{
"db": "PACKETSTORM",
"id": "112515"
},
{
"db": "PACKETSTORM",
"id": "114272"
},
{
"db": "PACKETSTORM",
"id": "112580"
},
{
"db": "PACKETSTORM",
"id": "113905"
},
{
"db": "PACKETSTORM",
"id": "112508"
},
{
"db": "PACKETSTORM",
"id": "112605"
},
{
"db": "PACKETSTORM",
"id": "112474"
},
{
"db": "NVD",
"id": "CVE-2012-1823"
}
]
},
"id": "VAR-201205-0305",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 0.47077376
},
"last_update_date": "2024-07-23T20:13:35.528000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "HT5501",
"trust": 0.8,
"url": "http://support.apple.com/kb/ht5501"
},
{
"title": "HT5501",
"trust": 0.8,
"url": "http://support.apple.com/kb/ht5501?viewlocale=ja_jp"
},
{
"title": "PHP-CGI \u306e query string \u306e\u51e6\u7406\u306b\u8106\u5f31\u6027\u3010CY12-06-001\u3011",
"trust": 0.8,
"url": "http://cs.cybozu.co.jp/information/20120606up02.php"
},
{
"title": "HPSBMU02786 SSRT100877",
"trust": 0.8,
"url": "http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c03360041"
},
{
"title": "HPSBUX02791 SSRT100856",
"trust": 0.8,
"url": "http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c03368475"
},
{
"title": "1621015",
"trust": 0.8,
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21621015"
},
{
"title": "1620314",
"trust": 0.8,
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21620314"
},
{
"title": "#61910",
"trust": 0.8,
"url": "https://bugs.php.net/bug.php?id=61910"
},
{
"title": "RHSA-2012:0546",
"trust": 0.8,
"url": "http://rhn.redhat.com/errata/rhsa-2012-0546.html"
},
{
"title": "RHSA-2012:0568",
"trust": 0.8,
"url": "http://rhn.redhat.com/errata/rhsa-2012-0568.html"
},
{
"title": "RHSA-2012:0547",
"trust": 0.8,
"url": "http://rhn.redhat.com/errata/rhsa-2012-0547.html"
},
{
"title": "PHP 5.3.12 and PHP 5.4.2 Released!",
"trust": 0.8,
"url": "http://www.php.net/archive/2012.php#id2012-05-03-1"
},
{
"title": "PHP: CGI \u30d0\u30a4\u30ca\u30ea\u3068\u3057\u3066\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb - Manual",
"trust": 0.8,
"url": "http://www.php.net/manual/ja/security.cgi-bin.php"
},
{
"title": "PHP 5 ChangeLog - Version 5.4.2",
"trust": 0.8,
"url": "http://www.php.net/changelog-5.php#5.4.2"
},
{
"title": "PHP 5.4.3 and PHP 5.3.13 Released!",
"trust": 0.8,
"url": "http://www.php.net/archive/2012.php#id2012-05-08-1"
},
{
"title": "Patch cgi.diff for CGI/CLI related Bug #61910",
"trust": 0.8,
"url": "https://bugs.php.net/patch-display.php?bug_id=61910\u0026patch=cgi.diff\u0026revision=1335984315\u0026display=1"
},
{
"title": "PHP 5.3.12 and 5.4.2 releases about CGI flaw (CVE-2012-1823)",
"trust": 0.8,
"url": "http://www.php.net/archive/2012.php#id2012-05-06-1"
},
{
"title": "001-005900",
"trust": 0.8,
"url": "https://support.cybozu.com/ja-jp/article/5900"
},
{
"title": "Red Hat: Critical: php53 security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20120569 - security advisory"
},
{
"title": "Red Hat: Critical: php security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20120568 - security advisory"
},
{
"title": "Red Hat: Critical: php security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20120546 - security advisory"
},
{
"title": "Red Hat: Critical: php53 security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20120547 - security advisory"
},
{
"title": "Debian CVElist Bug Report Logs: php5: PHP-CGI query string parameter vulnerability (CVE-2012-1823 / CVE-2012-2311, CERT VU#520827)",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=369fec60ba7ae134a5d768faf3cb2f6b"
},
{
"title": "Ubuntu Security Notice: php5 vulnerability",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-1437-1"
},
{
"title": "Amazon Linux AMI: ALAS-2012-077",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami\u0026qid=alas-2012-077"
},
{
"title": "Debian Security Advisories: DSA-2465-1 php5 -- several vulnerabilities",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=db88513c75df4c41339c6c90dcb69831"
},
{
"title": "Red Hat: Moderate: php security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20121045 - security advisory"
},
{
"title": "Red Hat: Moderate: php53 security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20121047 - security advisory"
},
{
"title": "Red Hat: Moderate: php security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20121046 - security advisory"
},
{
"title": "HacktivityCon_CTF_2020",
"trust": 0.1,
"url": "https://github.com/w3rni0/hacktivitycon_ctf_2020 "
},
{
"title": "exploits",
"trust": 0.1,
"url": "https://github.com/infodox/exploits "
},
{
"title": "webappurls",
"trust": 0.1,
"url": "https://github.com/pwnwiki/webappurls "
},
{
"title": "CVE-2012-1823",
"trust": 0.1,
"url": "https://github.com/drone789/cve-2012-1823 "
},
{
"title": "Covid-v2-Botnet",
"trust": 0.1,
"url": "https://github.com/sniperx-d/covid-v2-botnet "
},
{
"title": "covid",
"trust": 0.1,
"url": "https://github.com/mrscythelulz/covid "
},
{
"title": "python-pySecurity",
"trust": 0.1,
"url": "https://github.com/cybersavvy/python-pysecurity "
},
{
"title": "pySecurity",
"trust": 0.1,
"url": "https://github.com/smartflash/pysecurity "
},
{
"title": "AutoSploit",
"trust": 0.1,
"url": "https://github.com/rootup/autosploit "
},
{
"title": "Python",
"trust": 0.1,
"url": "https://github.com/bcybersavvy/python "
},
{
"title": "awesome-infosec",
"trust": 0.1,
"url": "https://github.com/onlurking/awesome-infosec "
},
{
"title": "awesome-infosec",
"trust": 0.1,
"url": "https://github.com/eric-erki/awesome-infosec "
},
{
"title": "Intrusion_Detection_System-Python",
"trust": 0.1,
"url": "https://github.com/marcocastro100/intrusion_detection_system-python "
},
{
"title": "deepdig",
"trust": 0.1,
"url": "https://github.com/cyberdeception/deepdig "
},
{
"title": "Boot2root-CTFs-Writeups",
"trust": 0.1,
"url": "https://github.com/jean-francois-c/boot2root-ctfs "
},
{
"title": "Boot2root-CTFs-Writeups",
"trust": 0.1,
"url": "https://github.com/jean-francois-c/boot2root-ctfs-writeups "
},
{
"title": "CDL",
"trust": 0.1,
"url": "https://github.com/ncsu-dance-research-group/cdl "
},
{
"title": "Classified-Distributed-Learning-for-Detecting-Security-Attacks-in-Containerized-Applications",
"trust": 0.1,
"url": "https://github.com/yuhang-lin/classified-distributed-learning-for-detecting-security-attacks-in-containerized-applications "
},
{
"title": "Threatpost",
"trust": 0.1,
"url": "https://threatpost.com/new-exploits-arrive-for-old-php-vulnerability/104881/"
},
{
"title": "Securelist",
"trust": 0.1,
"url": "https://securelist.com/it-threat-evolution-q2-2013/37163/"
},
{
"title": "Threatpost",
"trust": 0.1,
"url": "https://threatpost.com/php-group-set-release-another-patch-cve-2012-1823-flaw-050812/76537/"
},
{
"title": "Threatpost",
"trust": 0.1,
"url": "https://threatpost.com/php-group-releases-new-versions-patch-doesnt-fix-cve-2012-1823-bug-050412/76524/"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2012-1823"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002235"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
},
{
"problemtype": "CWE-20",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2012-002235"
},
{
"db": "NVD",
"id": "CVE-2012-1823"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.2,
"url": "http://www.kb.cert.org/vuls/id/520827"
},
{
"trust": 1.5,
"url": "http://www.kb.cert.org/vuls/id/673343"
},
{
"trust": 1.4,
"url": "http://www.php.net/archive/2012.php#id2012-05-03-1"
},
{
"trust": 1.4,
"url": "http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/"
},
{
"trust": 1.4,
"url": "http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c03360041"
},
{
"trust": 1.2,
"url": "http://rhn.redhat.com/errata/rhsa-2012-0568.html"
},
{
"trust": 1.2,
"url": "http://rhn.redhat.com/errata/rhsa-2012-0547.html"
},
{
"trust": 1.1,
"url": "https://bugs.php.net/bug.php?id=61910"
},
{
"trust": 1.1,
"url": "http://www.php.net/changelog-5.php#5.4.2"
},
{
"trust": 1.1,
"url": "https://bugs.php.net/patch-display.php?bug_id=61910\u0026patch=cgi.diff\u0026revision=1335984315\u0026display=1"
},
{
"trust": 1.1,
"url": "http://rhn.redhat.com/errata/rhsa-2012-0546.html"
},
{
"trust": 1.1,
"url": "http://secunia.com/advisories/49014"
},
{
"trust": 1.1,
"url": "http://secunia.com/advisories/49087"
},
{
"trust": 1.1,
"url": "http://secunia.com/advisories/49065"
},
{
"trust": 1.1,
"url": "http://marc.info/?l=bugtraq\u0026m=134012830914727\u0026w=2"
},
{
"trust": 1.1,
"url": "http://lists.apple.com/archives/security-announce/2012/sep/msg00004.html"
},
{
"trust": 1.1,
"url": "http://support.apple.com/kb/ht5501"
},
{
"trust": 1.1,
"url": "http://www.securitytracker.com/id?1027022"
},
{
"trust": 1.1,
"url": "http://secunia.com/advisories/49085"
},
{
"trust": 1.1,
"url": "http://www.mandriva.com/security/advisories?name=mdvsa-2012:068"
},
{
"trust": 1.1,
"url": "http://rhn.redhat.com/errata/rhsa-2012-0570.html"
},
{
"trust": 1.1,
"url": "http://rhn.redhat.com/errata/rhsa-2012-0569.html"
},
{
"trust": 1.1,
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00002.html"
},
{
"trust": 1.1,
"url": "http://www.debian.org/security/2012/dsa-2465"
},
{
"trust": 1.1,
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00011.html"
},
{
"trust": 1.1,
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00007.html"
},
{
"trust": 1.0,
"url": "http://www.openwall.com/lists/oss-security/2024/06/07/1"
},
{
"trust": 1.0,
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/pkgtquoa2ntz3rxn22csaujpiruyrb4b/"
},
{
"trust": 1.0,
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/w45dboh56nqdrtom2dn2lna2fzimc3pk/"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-1823"
},
{
"trust": 0.8,
"url": "http://jvn.jp/cert/jvnvu520827"
},
{
"trust": 0.8,
"url": "http://jvn.jp/cert/jvnvu381963/index.html"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-1823"
},
{
"trust": 0.6,
"url": "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c03839862"
},
{
"trust": 0.6,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-1823"
},
{
"trust": 0.3,
"url": "http://alerts.hp.com/r?2.1.3kt.2zr.xg7ek.hmj%2asm..t.a4jy.6o9k.bw89mq%5f%5fdmtsfto0"
},
{
"trust": 0.3,
"url": "http://www-01.ibm.com/software/lotus/products/foundations/start/"
},
{
"trust": 0.3,
"url": "http://kb.parallels.com/en/113818"
},
{
"trust": 0.3,
"url": "kb.parallels.com/en/116241"
},
{
"trust": 0.3,
"url": "https://community.rapid7.com/thread/5174"
},
{
"trust": 0.3,
"url": "http://www.php.net/"
},
{
"trust": 0.3,
"url": "http://seclists.org/fulldisclosure/2013/jun/21"
},
{
"trust": 0.3,
"url": "http://ompldr.org/vzgxxaq"
},
{
"trust": 0.3,
"url": "http://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10658\u0026cat=sirt_1\u0026actp=list"
},
{
"trust": 0.3,
"url": "https://downloads.avaya.com/css/p8/documents/100162699"
},
{
"trust": 0.3,
"url": "https://downloads.avaya.com/css/p8/documents/100165255"
},
{
"trust": 0.3,
"url": "http://www.h-online.com/security/news/item/critical-open-hole-in-php-creates-risks-update-1567532.html"
},
{
"trust": 0.3,
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21620314"
},
{
"trust": 0.3,
"url": "http://www.turbolinux.co.jp/security-e/2012/tlsa-2012-14.txt"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-2311"
},
{
"trust": 0.2,
"url": "http://h20566.www2.hp.com/portal/site/hpsc/public/kb/secbullarchive/"
},
{
"trust": 0.2,
"url": "http://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-0830"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-4153"
},
{
"trust": 0.2,
"url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-1172"
},
{
"trust": 0.2,
"url": "https://www.redhat.com/security/data/cve/cve-2012-1823.html"
},
{
"trust": 0.2,
"url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/team/contact/"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/team/key/#package"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"trust": 0.2,
"url": "http://bugzilla.redhat.com/):"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/knowledge/articles/11258"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/20.html"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2012:0569"
},
{
"trust": 0.1,
"url": "https://github.com/infodox/exploits"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://www.exploit-db.com/exploits/18836/"
},
{
"trust": 0.1,
"url": "http://www.ubuntu.com/usn/usn-1437-1/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/49097/#comments"
},
{
"trust": 0.1,
"url": "http://secunia.com/psi_30_beta_launch"
},
{
"trust": 0.1,
"url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=49097"
},
{
"trust": 0.1,
"url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
},
{
"trust": 0.1,
"url": "http://secunia.com/vulnerability_intelligence/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/49097/"
},
{
"trust": 0.1,
"url": "http://secunia.com/vulnerability_scanning/personal/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-0036"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-2016"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-0057"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-4078"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-0031"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-1165"
},
{
"trust": 0.1,
"url": "http://h20566.www2.hp.com/portal/site/hpsc/template.page/public/psi/swddetail"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-4885"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-2834"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-4317"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-1944"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-2014"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-4108"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-2013"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-4415"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-4577"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-3607"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-4619"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-0021"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-0027"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-0053"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-2012"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-2015"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-3379"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-4576"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-2821"
},
{
"trust": 0.1,
"url": "http://secunia.com/"
},
{
"trust": 0.1,
"url": "http://www.debian.org/security/faq"
},
{
"trust": 0.1,
"url": "http://www.debian.org/security/"
},
{
"trust": 0.1,
"url": "http://lists.grok.org.uk/full-disclosure-charter.html"
},
{
"trust": 0.1,
"url": "http://software.hp.com"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-0883"
},
{
"trust": 0.1,
"url": "https://www.hp.com/go/swa"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/php5/5.3.5-1ubuntu7.8"
},
{
"trust": 0.1,
"url": "http://people.canonical.com/~ubuntu-security/cve/2012/cve-2012-2311.html"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/php5/5.2.4-2ubuntu5.24"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/php5/5.3.2-1ubuntu4.15"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/php5/5.3.6-13ubuntu3.7"
},
{
"trust": 0.1,
"url": "http://www.ubuntu.com/usn/usn-1437-1"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2012-1823"
},
{
"db": "BID",
"id": "53388"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002235"
},
{
"db": "PACKETSTORM",
"id": "112515"
},
{
"db": "PACKETSTORM",
"id": "114272"
},
{
"db": "PACKETSTORM",
"id": "112580"
},
{
"db": "PACKETSTORM",
"id": "113905"
},
{
"db": "PACKETSTORM",
"id": "112508"
},
{
"db": "PACKETSTORM",
"id": "112605"
},
{
"db": "PACKETSTORM",
"id": "112474"
},
{
"db": "NVD",
"id": "CVE-2012-1823"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULMON",
"id": "CVE-2012-1823"
},
{
"db": "BID",
"id": "53388"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002235"
},
{
"db": "PACKETSTORM",
"id": "112515"
},
{
"db": "PACKETSTORM",
"id": "114272"
},
{
"db": "PACKETSTORM",
"id": "112580"
},
{
"db": "PACKETSTORM",
"id": "113905"
},
{
"db": "PACKETSTORM",
"id": "112508"
},
{
"db": "PACKETSTORM",
"id": "112605"
},
{
"db": "PACKETSTORM",
"id": "112474"
},
{
"db": "NVD",
"id": "CVE-2012-1823"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2012-05-11T00:00:00",
"db": "VULMON",
"id": "CVE-2012-1823"
},
{
"date": "2012-05-04T00:00:00",
"db": "BID",
"id": "53388"
},
{
"date": "2012-05-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2012-002235"
},
{
"date": "2012-05-08T04:16:46",
"db": "PACKETSTORM",
"id": "112515"
},
{
"date": "2012-06-28T03:39:12",
"db": "PACKETSTORM",
"id": "114272"
},
{
"date": "2012-05-10T03:59:25",
"db": "PACKETSTORM",
"id": "112580"
},
{
"date": "2012-06-19T18:22:00",
"db": "PACKETSTORM",
"id": "113905"
},
{
"date": "2012-05-07T20:04:50",
"db": "PACKETSTORM",
"id": "112508"
},
{
"date": "2012-05-10T21:02:10",
"db": "PACKETSTORM",
"id": "112605"
},
{
"date": "2012-05-06T01:28:45",
"db": "PACKETSTORM",
"id": "112474"
},
{
"date": "2012-05-11T10:15:48.043000",
"db": "NVD",
"id": "CVE-2012-1823"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-01-18T00:00:00",
"db": "VULMON",
"id": "CVE-2012-1823"
},
{
"date": "2015-04-13T22:15:00",
"db": "BID",
"id": "53388"
},
{
"date": "2013-05-24T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2012-002235"
},
{
"date": "2024-07-16T17:48:42.937000",
"db": "NVD",
"id": "CVE-2012-1823"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "network",
"sources": [
{
"db": "BID",
"id": "53388"
}
],
"trust": 0.3
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "PHP-CGI of query string Vulnerability in processing",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2012-002235"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "arbitrary",
"sources": [
{
"db": "PACKETSTORM",
"id": "114272"
},
{
"db": "PACKETSTORM",
"id": "112580"
},
{
"db": "PACKETSTORM",
"id": "113905"
},
{
"db": "PACKETSTORM",
"id": "112474"
}
],
"trust": 0.4
}
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.