NVD Vulnerability Detail

CVE-2012-0830

Summary	The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.
Publication Date	Feb. 7, 2012, 5:55 a.m.
Registration Date	Jan. 28, 2021, 2:54 p.m.
Last Update	Nov. 21, 2024, 10:35 a.m.

CVSS2.0 : HIGH
Score	7.5
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:php:php:5.3.9:::::::*

Related information, measures and tools

No	URL	タグ
1	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
2	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
3	http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
4	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html
5	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html
6	http://marc.info/?l=bugtraq&m=134012830914727&w=2
7	http://marc.info/?l=bugtraq&m=134012830914727&w=2
8	http://openwall.com/lists/oss-security/2012/02/02/12
9	http://openwall.com/lists/oss-security/2012/02/03/1
10	http://rhn.redhat.com/errata/RHSA-2012-0092.html
11	http://secunia.com/advisories/47801
12	http://secunia.com/advisories/47806	Vendor Advisory
13	http://secunia.com/advisories/47813
14	http://secunia.com/advisories/48668
15	http://securitytracker.com/id?1026631
16	http://support.apple.com/kb/HT5281
17	http://svn.php.net/viewvc?view=revision&revision=323007
18	http://thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos/	Exploit
19	http://www.debian.org/security/2012/dsa-2403
20	http://www.h-online.com/security/news/item/Critical-PHP-vulnerability-being-fixed-1427316.html
21	http://www.osvdb.org/78819
22	http://www.php.net/ChangeLog-5.php#5.3.10
23	http://www.securityfocus.com/bid/51830	Exploit
24	https://exchange.xforce.ibmcloud.com/vulnerabilities/72911
25	https://gist.github.com/1725489	Exploit
26	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
27	https://gist.github.com/1725489	Exploit
28	https://exchange.xforce.ibmcloud.com/vulnerabilities/72911
29	http://www.securityfocus.com/bid/51830	Exploit
30	http://www.php.net/ChangeLog-5.php#5.3.10
31	http://www.osvdb.org/78819
32	http://www.h-online.com/security/news/item/Critical-PHP-vulnerability-being-fixed-1427316.html
33	http://www.debian.org/security/2012/dsa-2403
34	http://thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos/	Exploit
35	http://svn.php.net/viewvc?view=revision&revision=323007
36	http://support.apple.com/kb/HT5281
37	http://securitytracker.com/id?1026631
38	http://secunia.com/advisories/48668
39	http://secunia.com/advisories/47813
40	http://secunia.com/advisories/47806	Vendor Advisory
41	http://secunia.com/advisories/47801
42	http://rhn.redhat.com/errata/RHSA-2012-0092.html
43	http://openwall.com/lists/oss-security/2012/02/03/1
44	http://openwall.com/lists/oss-security/2012/02/02/12
45	http://marc.info/?l=bugtraq&m=134012830914727&w=2
46	http://marc.info/?l=bugtraq&m=134012830914727&w=2
47	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html
48	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html
49	http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
50	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-399	リソース管理の問題	https://cwe.mitre.org/data/definitions/399.html

JVN Vulnerability Information

PHP の php_variables.c 内の php_register_variable_ex 関数における任意のコードを実行される脆弱性

Title	PHP の php_variables.c 内の php_register_variable_ex 関数における任意のコードを実行される脆弱性
Summary	PHP の php_variables.c 内の php_register_variable_ex 関数には、任意のコードを実行される脆弱性が存在します。本脆弱性は CVE-2011-4885 に対する修正が不十分だったことによる脆弱性です。
Possible impacts	第三者により、大量の変数を含むリクエストを介して、任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 1, 2012, midnight
Registration Date	Feb. 8, 2012, 4:16 p.m.
Last Update	July 24, 2012, 6:02 p.m.

Affected System

The PHP Group

PHP 5.3.9

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-0830	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0830
National Vulnerability Database (NVD)
2	CVE-2012-0830	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0830

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-399	https://jvndb.jvn.jp/ja/cwe/CWE-399.html

ベンダー情報

No	Name	URL
Apple Security Updates
1	HT5281	http://support.apple.com/kb/HT5281
Debian Security Advisory
2	DSA-2403	http://www.debian.org/security/2012/dsa-2403
HP Security Bulletin
3	HPSBMU02786 SSRT100877	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
4	HPSBUX02791 SSRT100856	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03368475
opensuse-security-announce
5	openSUSE-SU-2012:0426-1	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html
PHP
6	323007	http://svn.php.net/viewvc?view=revision&revision=323007
7	PHP ChangeLog Version 5.3.10	http://www.php.net/ChangeLog-5.php#5.3.10
Red Hat Security Advisory
8	RHSA-2012:0092	http://rhn.redhat.com/errata/RHSA-2012-0092.html

その他

No	Name	URL
JVN
1	JVNVU#692779	http://jvn.jp/cert/JVNVU692779/

Change Log

No	Changed Details	Date of change
0	[2012年02月08日] 掲載 [2012年05月14日] ベンダ情報：アップル (HT5281) を追加 [2012年07月24日] ベンダ情報：Debian (DSA-2403) を追加ベンダ情報：openSUSE (openSUSE-SU-2012:0426-1) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU02786 SSRT100877) を追加ベンダ情報：ヒューレット・パッカード (HPSBUX02791 SSRT100856) を追加ベンダ情報：レッドハット (RHSA-2012:0092) を追加	Feb. 17, 2018, 10:37 a.m.