National Vulnerability Database (NVD) National Vulnerability Database (CVE-2009-4143)

National Cyber-Alert System

Vulnerability Summary for CVE-2009-4143

Original release date:12/21/2009

Last revised:07/19/2011

Source: US-CERT/NIST

Overview

PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1) interrupt corruption of the SESSION superglobal array and (2) the session.save_path directive.

Impact

CVSS Severity (version 2.0):

CVSS v2 Base Score:10.0 (HIGH) (AV:N/AC:L/Au:N/C:C/I:C/A:C) (legend)

Impact Subscore: 10.0

Exploitability Subscore: 10.0

CVSS Version 2 Metrics:

Access Vector: Network exploitable

Access Complexity: Low

Authentication: Not required to exploit

Impact Type:Allows unauthorized disclosure of information; Allows unauthorized modification; Allows disruption of service

Vendor Statements (disclaimer)

Official Statement from Red Hat (12/23/2009)

We do not consider safe_mode / open_basedir restriction bypass issues being security sensitive. For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1 and http://www.php.net/security-note.php

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2009-3593

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2009/3593

External Source: BID

Name: 37390

Hyperlink:http://www.securityfocus.com/bid/37390

External Source: CONFIRM

Name: http://www.php.net/releases/5_2_12.php

Type: Advisory

Hyperlink:http://www.php.net/releases/5_2_12.php

External Source: CONFIRM

Name: http://www.php.net/ChangeLog-5.php

Hyperlink:http://www.php.net/ChangeLog-5.php

External Source: MANDRIVA

Name: MDVSA-2010:045

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2010:045

External Source: HP

Name: HPSBMA02568

Hyperlink:http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995

External Source: HP

Name: HPSBMA02568

Hyperlink:http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995

External Source: DEBIAN

Name: DSA-2001

Hyperlink:http://www.debian.org/security/2010/dsa-2001

External Source: CONFIRM

Name: http://support.apple.com/kb/HT4077

Hyperlink:http://support.apple.com/kb/HT4077

External Source: SECUNIA

Name: 41490

Type: Advisory

Hyperlink:http://secunia.com/advisories/41490

External Source: SECUNIA

Name: 41480

Type: Advisory

Hyperlink:http://secunia.com/advisories/41480

External Source: SECUNIA

Name: 40262

Type: Advisory

Hyperlink:http://secunia.com/advisories/40262

External Source: SECUNIA

Name: 38648

Type: Advisory

Hyperlink:http://secunia.com/advisories/38648

External Source: SECUNIA

Name: 37821

Type: Advisory

Hyperlink:http://secunia.com/advisories/37821

External Source: OVAL

Name: oval:org.mitre.oval:def:7439

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7439

External Source: HP

Name: HPSBUX02543

Hyperlink:http://marc.info/?l=bugtraq&m=127680701405735&w=2

External Source: HP

Name: HPSBUX02543

Hyperlink:http://marc.info/?l=bugtraq&m=127680701405735&w=2

External Source: APPLE

Name: APPLE-SA-2010-03-29-1

Hyperlink:http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html

References to Check Content

Identifier:oval:org.mitre.oval:def:7439

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:7439

Vulnerable software and versions

Configuration 1

* cpe:/a:php:php:4.3.10

* cpe:/a:php:php:4.3.1

* cpe:/a:php:php:4.3.2

* cpe:/a:php:php:4.3.11

* cpe:/a:php:php:4.3.4

* cpe:/a:php:php:4.3.3

* cpe:/a:php:php:4.3.6

* cpe:/a:php:php:4.3.5

* cpe:/a:php:php:4.2

* cpe:/a:php:php:4.1.3

* cpe:/a:php:php:4.2.1

* cpe:/a:php:php:4.2.0

* cpe:/a:php:php:4.2.3

* cpe:/a:php:php:4.2.2

* cpe:/a:php:php:4.3

* cpe:/a:php:php:4.2.4

* cpe:/a:php:php:4.4.5

* cpe:/a:php:php:4.4.6

* cpe:/a:php:php:4.4.7

* cpe:/a:php:php:5.0:rc1

* cpe:/a:php:php:5.0:rc2

* cpe:/a:php:php:5.0:rc3

* cpe:/a:php:php:5.0.0

* cpe:/a:php:php:5.0.0:beta1

* cpe:/a:php:php:4.3.7

* cpe:/a:php:php:4.3.8

* cpe:/a:php:php:4.3.9

* cpe:/a:php:php:4.4.0

* cpe:/a:php:php:4.4.1

* cpe:/a:php:php:4.4.2

* cpe:/a:php:php:4.4.3

* cpe:/a:php:php:4.4.4

* cpe:/a:php:php:5.1

* cpe:/a:php:php:5.0.5

* cpe:/a:php:php:5.0.4

* cpe:/a:php:php:5.0.3

* cpe:/a:php:php:5.0.0:rc1

* cpe:/a:php:php:5.0.0:beta4

* cpe:/a:php:php:5.0.0:beta3

* cpe:/a:php:php:5.0.0:beta2

* cpe:/a:php:php:5.0.2

* cpe:/a:php:php:5.0.1

* cpe:/a:php:php:5.0.0:rc3

* cpe:/a:php:php:5.0.0:rc2

* cpe:/a:php:php:1.0

* cpe:/a:php:php:2.0b10

* cpe:/a:php:php:2.0

* cpe:/a:php:php:4.4.8

* cpe:/a:php:php:4.4.9

* cpe:/a:php:php:5

* cpe:/a:php:php:4

* cpe:/a:php:php:4.3.0

* cpe:/a:php:php:3.0.11

* cpe:/a:php:php:3.0.10

* cpe:/a:php:php:3.0.13

* cpe:/a:php:php:3.0.12

* cpe:/a:php:php:3.0.1

* cpe:/a:php:php:3.0

* cpe:/a:php:php:3.0.2

* cpe:/a:php:php:3.0.18

* cpe:/a:php:php:3.0.4

* cpe:/a:php:php:3.0.3

* cpe:/a:php:php:3.0.15

* cpe:/a:php:php:3.0.14

* cpe:/a:php:php:3.0.17

* cpe:/a:php:php:3.0.16

* cpe:/a:php:php:4.0:beta1

* cpe:/a:php:php:4.0:beta2

* cpe:/a:php:php:3.0.9

* cpe:/a:php:php:4.0

* cpe:/a:php:php:3.0.7

* cpe:/a:php:php:3.0.8

* cpe:/a:php:php:3.0.5

* cpe:/a:php:php:3.0.6

* cpe:/a:php:php:4.0.1

* cpe:/a:php:php:4.0:rc2

* cpe:/a:php:php:4.0.0

* cpe:/a:php:php:4.0:rc1

* cpe:/a:php:php:4.0:beta3

* cpe:/a:php:php:4.0:beta4

* cpe:/a:php:php:4.0.6

* cpe:/a:php:php:4.0.5

* cpe:/a:php:php:4.0.4

* cpe:/a:php:php:4.0.3

* cpe:/a:php:php:4.0.2

* cpe:/a:php:php:4.1.2

* cpe:/a:php:php:4.1.1

* cpe:/a:php:php:4.1.0

* cpe:/a:php:php:4.0.7:rc4

* cpe:/a:php:php:4.0.7:rc3

* cpe:/a:php:php:4.0.7:rc2

* cpe:/a:php:php:4.0.7:rc1

* cpe:/a:php:php:4.0.7

* cpe:/a:php:php:5.1.0

* cpe:/a:php:php:5.1.1

* cpe:/a:php:php:5.1.2

* cpe:/a:php:php:5.1.3

* cpe:/a:php:php:5.1.4

* cpe:/a:php:php:5.1.5

* cpe:/a:php:php:5.1.6

* cpe:/a:php:php:5.2.0

* cpe:/a:php:php:5.2.1

* cpe:/a:php:php:5.2.10

* cpe:/a:php:php:5.2.2

* cpe:/a:php:php:5.2.3

* cpe:/a:php:php:5.2.4

* cpe:/a:php:php:5.2.5

* cpe:/a:php:php:5.2.6

* cpe:/a:php:php:5.2.7

* cpe:/a:php:php:5.2.8

* cpe:/a:php:php:5.2.9

* cpe:/a:php:php:5.2.11 and previous versions

* cpe:/a:php:php:4.0:beta_4_patch1

* Denotes Vulnerable Software

Technical Details

Vulnerability Type (View All)

Other (NVD-CWE-Other)

CVE Standard Vulnerability Entry:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4143