admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-28 17:21:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2024/CVE-2024-45xx/CVE-2024-4577.json
cad-safe-bot 07a876b9e6 Auto-Update: 2024-08-14T20:00:17.934585+00:00
2024-08-14 20:03:14 +00:00

287 lines
8.8 KiB
JSON
Raw Blame History

{
"id": "CVE-2024-4577",
"sourceIdentifier": "security@php.net",
"published": "2024-06-09T20:15:09.550",
"lastModified": "2024-08-14T19:23:47.253",
"vulnStatus": "Analyzed",
"cveTags": [],
"cisaExploitAdd": "2024-06-12",
"cisaActionDue": "2024-07-03",
"cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
"cisaVulnerabilityName": "PHP-CGI OS Command Injection Vulnerability",
"descriptions": [
{
"lang": "en",
"value": "In PHP versions\u00a08.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use \"Best-Fit\" behavior to replace characters in command line given to\u00a0Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc."
},
{
"lang": "es",
"value": "En las versiones de PHP 8.1.* anteriores a 8.1.29, 8.2.* anteriores a 8.2.20, 8.3.* anteriores a 8.3.8, cuando se usa Apache y PHP-CGI en Windows, si el sistema est\u00e1 configurado para usar ciertas p\u00e1ginas de c\u00f3digos, Windows puede utilizar el comportamiento \"Mejor ajuste\" para reemplazar caracteres en la l\u00ednea de comando proporcionada a las funciones de la API de Win32. El m\u00f3dulo PHP CGI puede malinterpretar esos caracteres como opciones de PHP, lo que puede permitir a un usuario malintencionado pasar opciones al binario PHP que se est\u00e1 ejecutando y, por lo tanto, revelar el c\u00f3digo fuente de los scripts, ejecutar c\u00f3digo PHP arbitrario en el servidor, etc."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "security@php.net",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
},
{
"source": "security@php.net",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.0.0",
"versionEndExcluding": "8.1.29",
"matchCriteriaId": "A8DF5D29-9ADB-4CE9-9DCE-9FFECA97800C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.2.0",
"versionEndExcluding": "8.2.20",
"matchCriteriaId": "A39988FF-D854-4277-9D66-6911AF371DD3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.3.0",
"versionEndExcluding": "8.3.8",
"matchCriteriaId": "F579FFC1-4F81-4755-B14B-3AA73AC9FF7A"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
"matchCriteriaId": "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*",
"matchCriteriaId": "CA277A6C-83EC-4536-9125-97B84C4FAF59"
}
]
}
]
}
],
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2024/06/07/1",
"source": "security@php.net",
"tags": [
"Mailing List",
"Release Notes"
]
},
{
"url": "https://arstechnica.com/security/2024/06/php-vulnerability-allows-attackers-to-run-malicious-code-on-windows-servers/",
"source": "security@php.net",
"tags": [
"Exploit",
"Press/Media Coverage",
"Third Party Advisory"
]
},
{
"url": "https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html",
"source": "security@php.net",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://cert.be/en/advisory/warning-php-remote-code-execution-patch-immediately",
"source": "security@php.net",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en/",
"source": "security@php.net",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/11whoami99/CVE-2024-4577",
"source": "security@php.net",
"tags": [
"Exploit"
]
},
{
"url": "https://github.com/php/php-src/security/advisories/GHSA-3qgc-jrrr-25jv",
"source": "security@php.net",
"tags": [
"Broken Link"
]
},
{
"url": "https://github.com/rapid7/metasploit-framework/pull/19247",
"source": "security@php.net",
"tags": [
"Exploit",
"Issue Tracking"
]
},
{
"url": "https://github.com/watchtowrlabs/CVE-2024-4577",
"source": "security@php.net",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/xcanwin/CVE-2024-4577-PHP-RCE",
"source": "security@php.net",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://isc.sans.edu/diary/30994",
"source": "security@php.net",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://labs.watchtowr.com/no-way-php-strikes-again-cve-2024-4577/",
"source": "security@php.net",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/",
"source": "security@php.net",
"tags": [
"Mailing List",
"Third Party Advisory"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/",
"source": "security@php.net",
"tags": [
"Mailing List",
"Third Party Advisory"
]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240621-0008/",
"source": "security@php.net",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.imperva.com/blog/imperva-protects-against-critical-php-vulnerability-cve-2024-4577/",
"source": "security@php.net",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.php.net/ChangeLog-8.php#8.1.29",
"source": "security@php.net",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.php.net/ChangeLog-8.php#8.2.20",
"source": "security@php.net",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.php.net/ChangeLog-8.php#8.3.8",
"source": "security@php.net",
"tags": [
"Release Notes"
]
}
]
}
Reference in New Issue View Git Blame Copy Permalink