Improper input validation in PHP
CVE-2012-4388
The sapi_header_op function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly determine a pointer during checks for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction between the PHP header function and certain browsers, as demonstrated by Internet Explorer and Google Chrome. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1398.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.3 (Medium). Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.042 (90.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 91st percentile — 90.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.042 · newest: 0.042 · change: 0.000
Affected products
- PHP — versions 5.4.0
- Canonical Ubuntu Linux — versions 8.04, 10.04, 11.04
- Debian Linux — versions 6.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-tracker.debian.org/tracker/CVE-2012-4388 (Third Party Advisory)
- openwall.com/lists/oss-security/2012/09/05/15 (mailing-list, Mailing List, Third Party Advisory)
- www.securitytracker.com/id (VDB Entry, Third Party Advisory, vdb-entry)
- openwall.com/lists/oss-security/2012/09/07/3 (mailing-list, Mailing List, Third Party Advisory)
- svn.php.net/viewvc/php/php-src/branches/PHP_5_4/main/SAPI.c (Exploit, Patch, Vendor Advisory)
- bugs.php.net/bug.php (Vendor Advisory)
- openwall.com/lists/oss-security/2012/08/29/5 (mailing-list, Mailing List, Third Party Advisory)
- openwall.com/lists/oss-security/2012/09/02/1 (mailing-list, Mailing List, Third Party Advisory)
- lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html (vendor-advisory, Mailing List, Third Party Advisory)
- article.gmane.org/gmane.comp.php.devel/70584 (mailing-list, Broken Link)
Frequently asked questions
- What is CVE-2012-4388?
- CVE-2012-4388 is a vulnerability in PHP, classified under Improper Input Validation. Published 2012-09-07.
- Is CVE-2012-4388 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.