CVE-2012-2336

MediumPublished

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that...

Published: May 11, 2012
Updated: Aug 6, 2024
Assigning CNA: redhat
Evidence observed: May 4, 2012

Primary CVSS

5.0/ 10Medium

nvd · CVSS 2.0

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS probability estimate

50.3%

High · next 30 days

Percentile: 98.9%
Model date: Oct 13, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.

Sources

PHP 5.3.12/5.4.2 - CGI Argument Injection (Metasploit)Exploit
Metasploit · php · May 4, 2012
PHP < 5.3.12 / < 5.4.2 - CGI Argument InjectionExploit
rayh4c · php · May 5, 2012
Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.