CVE-2012-4388
Medium
Description
The sapi_header_op function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly determine a pointer during checks for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction between the PHP header function and certain browsers, as demonstrated by Internet Explorer and Google Chrome. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1398.
SeverityMedium
CVSS4.3
Exploit probability—
Product
Php
PublishedSep 7, 2012
First seenSep 7, 2012
How to fix
Update
- php php5.3.11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php php | 5.3.0 ≤ v < 5.3.11, 5.4.0 | 5.3.11 |
| canonical ubuntu_linux | 8.04, 10.04, 11.04, 11.10, 12.04 | — |
| debian debian_linux | 6.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.