blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2012-1172

MEDIUM 5.8 CVSS 2.0
Published
May 24, 2012
Last modified
June 16, 2026
NVD status
Modified
Reported by
secalert@redhat.com
Weakness
CWE-20
CVSS vector
AV:N/AC:M/Au:N/C:N/I:P/A:P

Description

The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.

Affected products and versions

  • PHP — Up to and including 5.3.10
  • PHP versions 5.0.0, 5.0.0beta1, 5.0.0beta2, 5.0.0beta3, 5.0.0beta4, 5.0.0rc1, 5.0.0rc2, 5.0.0rc3, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.1.0, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.5, 5.1.6, 5.2.0, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.2.5, 5.2.6, 5.2.7, 5.2.8, 5.2.9, 5.2.10, 5.2.11, 5.2.12, 5.2.13, 5.2.14, 5.2.15, 5.2.16, 5.2.17, 5.3.0, 5.3.1, 5.3.2, 5.3.3, 5.3.4, 5.3.5, 5.3.6, 5.3.7, 5.3.8, 5.3.9

References

  • isisblogs.poly.edu http://isisblogs.poly.edu/2011/08/11/php-not-properly-checking-params/ Exploit
  • lists.apple.com http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
  • lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080037.html
  • lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080041.html
  • lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080070.html
  • lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00007.html
  • lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00011.html
  • marc.info http://marc.info/?l=bugtraq&m=134012830914727&w=2
  • openwall.com http://openwall.com/lists/oss-security/2012/03/13/4
  • support.apple.com http://support.apple.com/kb/HT5501
  • svn.php.net http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/main/rfc1867.c?r1=321664&r2=321663&pathrev=321664 Patch
  • svn.php.net http://svn.php.net/viewvc?view=revision&revision=321664
  • www.debian.org http://www.debian.org/security/2012/dsa-2465
  • www.php.net http://www.php.net/ChangeLog-5.php#5.4.0
  • bugs.php.net https://bugs.php.net/bug.php?id=48597 Exploit
  • bugs.php.net https://bugs.php.net/bug.php?id=49683
  • bugs.php.net https://bugs.php.net/bug.php?id=54374 Exploit
  • bugs.php.net https://bugs.php.net/bug.php?id=55500
  • nealpoole.com https://nealpoole.com/blog/2011/10/directory-traversal-via-php-multi-file-uploads/ Exploit
  • students.mimuw.edu.pl https://students.mimuw.edu.pl/~ai292615/php_multipleupload_overwrite.pdf Exploit
  • nvd.nist.gov Official NVD record