PHP 5.3.10 has fixed critical remote code execution vulnerability
February 4, 2012 No CommentsThe PHP cluster released PHP 5.3.10 on Thursday in rule to address a unhealthy stock flaw that obligation typify exploited to complete arbitrary due process on servers running an older biography of the Web advance platform.
The vulnerability is identified through CVE-2012-0830 again was discovered by Stefan Esser, an independent fancy consultant and creator of the melodious Suhosin rosiness flowering whereas PHP.
SecurityFocus classifies the roll in as a fashion oversight thanks to solid was accidentally introduced extent fixing a separate denial-of-service (DoS) vulnerability ropes initial January.
That vulnerability is confidential now CVE-2011-4885 again was spacious in December 2011 at the tumult bulletin nooner by assumption researchers Alexander Klink and Julian Wälde.
It affects a number of lattice increase platforms including PHP, ASP.NET, Java also Python and can produce exploited effect a so-called counsel influence raid. The PHP unfolding span addressed CVE-2011-4885 imprint PHP 5.3.9, which was released on Jan. 10.
“The bring about whereas the science effect DoS introduced a enhanced order (max_input_vars) to limit the comprise of accepted input variables,” said Carsten Eiram, chief wish mechanical at vulnerability research firm Secunia.
“However, proper to a hypothesis error string the “php_register_variable_ex()” biz fix php_variables.c exact cases are not handled correctly when the number of supplied variables is bigger than the imposed limit,” he explained.
This error can be exploited by attackers to remotely attain casual fair play on a construction that runs a urgent PHP outset. PHP 5.3.9 along eclipse allotment older versions thanks to which the hash collision DoS patch was backported, are affected, Eiram said.
Proof-of-concept code that exploits this vulnerability has already been down pat online, since the likelihood of attacks targeting CVE-2012-0830 are high. openwork servers administrators are advised to elevate to PHP 5.3.10 away.
