Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:PHP:GLOBALS-INJ |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
PHP GLOBALS Variable Overwrite |
Release Date |
2005/04/21 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: PHP GLOBALS Variable Overwrite
This signature detects attempts to misuse the PHP GLOBALS variable. PHP 5.0.3 and earlier versions are vulnerable. Attackers can overwrite the GLOBALS variable.
Extended Description
PHP is prone to a vulnerability that allows attackers to overwrite the GLOBAL variable via HTTP POST requests. By exploiting this issue, remote attackers may be able to overwrite the GLOBAL variable. This may allow attackers to further exploit latent vulnerabilities in PHP scripts.
Affected Products
- Avaya intuity LX
- Avaya message_networking
- Avaya messaging_storage_server
- E107 e107_website_system 0.7.5
- Gentoo linux
- Hp system_management_homepage 2.0.0
- Hp system_management_homepage 2.0.1
- Hp system_management_homepage 2.0.2
- Hp system_management_homepage 2.1.0
- Hp system_management_homepage 2.1.1
- Hp system_management_homepage 2.1.2
- Hp system_management_homepage 2.1.3
- Hp system_management_homepage 2.1.3 .132
- Hp system_management_homepage 2.1.4
- Mandriva corporate_server 2.1.0
- Mandriva corporate_server 2.1.0 X86 64
- Mandriva corporate_server 3.0.0
- Mandriva corporate_server 3.0.0 X86 64
- Mandriva linux_mandrake 10.1.0
- Mandriva linux_mandrake 10.1.0 X86 64
- Mandriva linux_mandrake 10.2.0
- Mandriva linux_mandrake 10.2.0 X86 64
- Mandriva linux_mandrake 2006.0.0
- Mandriva linux_mandrake 2006.0.0 X86 64
- Mandriva multi_network_firewall 2.0.0
- Openpkg openpkg 2.3.0
- Openpkg openpkg 2.4.0
- Openpkg openpkg 2.5.0
- Openpkg openpkg Current
- Php php 3.0.0 0
- Php php 3.0.0 .10
- Php php 3.0.0 .11
- Php php 3.0.0 .12
- Php php 3.0.0 .13
- Php php 3.0.0 .16
- Php php 3.0.1
- Php php 3.0.10
- Php php 3.0.11
- Php php 3.0.12
- Php php 3.0.13
- Php php 3.0.14
- Php php 3.0.15
- Php php 3.0.16
- Php php 3.0.17
- Php php 3.0.18
- Php php 3.0.2
- Php php 3.0.3
- Php php 3.0.4
- Php php 3.0.5
- Php php 3.0.6
- Php php 3.0.7
- Php php 3.0.8
- Php php 3.0.9
- Php php 4.0.0 0
- Php php 4.0.1
- Php php 4.0.1 Pl1
- Php php 4.0.1 Pl2
- Php php 4.0.2
- Php php 4.0.3
- Php php 4.0.3 Pl1
- Php php 4.0.4
- Php php 4.0.5
- Php php 4.0.6
- Php php 4.0.7
- Php php 4.0.7 RC1
- Php php 4.0.7 RC2
- Php php 4.0.7 RC3
- Php php 4.1.0 .0
- Php php 4.1.1
- Php php 4.1.2
- Php php 4.2.0 .0
- Php php 4.2.0 -Dev
- Php php 4.2.1
- Php php 4.2.2
- Php php 4.2.3
- Php php 4.3.0
- Php php 4.3.1
- Php php 4.3.10
- Php php 4.3.11
- Php php 4.3.2
- Php php 4.3.3
- Php php 4.3.4
- Php php 4.3.5
- Php php 4.3.6
- Php php 4.3.7
- Php php 4.3.8
- Php php 4.3.9
- Php php 4.4.0 .0
- Php php 5.0.0 .0
- Php php 5.0.0 Candidate 1
- Php php 5.0.0 Candidate 2
- Php php 5.0.0 Candidate 3
- Php php 5.0.1
- Php php 5.0.2
- Php php 5.0.3
- Php php 5.0.4
- Php php 5.0.5
- Red_hat advanced_workstation_for_the_itanium_processor 2.1.0
- Red_hat advanced_workstation_for_the_itanium_processor 2.1.0 IA64
- Red_hat desktop 3.0.0
- Red_hat desktop 4.0.0
- Red_hat enterprise_linux_as 2.1
- Red_hat enterprise_linux_as 2.1 IA64
- Red_hat enterprise_linux_as 3
- Red_hat enterprise_linux_as 4
- Red_hat enterprise_linux_es 2.1
- Red_hat enterprise_linux_es 2.1 IA64
- Red_hat enterprise_linux_es 3
- Red_hat enterprise_linux_es 4
- Red_hat enterprise_linux_ws 2.1
- Red_hat enterprise_linux_ws 2.1 IA64
- Red_hat enterprise_linux_ws 3
- Red_hat enterprise_linux_ws 4
- Red_hat fedora Core1
- Red_hat fedora Core2
- Red_hat fedora Core3
- Red_hat fedora Core4
- Red_hat linux 7.3.0 I386
- Red_hat linux 9.0.0 I386
- Red_hat stronghold 4.0.0
- Sgi propack 3.0.0 SP6
- Suse linux_desktop 1.0.0
- Suse linux_enterprise_server_for_s/390 9.0.0
- Suse linux_openexchange_server
- Suse linux_personal 10.0.0 OSS
- Suse linux_personal 8.2.0
- Suse linux_personal 9.0.0
- Suse linux_personal 9.0.0 X86 64
- Suse linux_personal 9.1.0
- Suse linux_personal 9.1.0 X86 64
- Suse linux_personal 9.2.0
- Suse linux_personal 9.2.0 X86 64
- Suse linux_personal 9.3.0
- Suse linux_personal 9.3.0 X86 64
- Suse linux_professional 10.0.0
- Suse linux_professional 10.0.0 OSS
- Suse linux_professional 8.2.0
- Suse linux_professional 9.0.0
- Suse linux_professional 9.0.0 X86 64
- Suse linux_professional 9.1.0
- Suse linux_professional 9.1.0 X86 64
- Suse linux_professional 9.2.0
- Suse linux_professional 9.2.0 X86 64
- Suse linux_professional 9.3.0
- Suse linux_professional 9.3.0 X86 64
- Suse novell_linux_desktop 9.0.0
- Suse open-enterprise-server 9.0.0
- Suse suse_linux_enterprise_server 8
- Suse suse_linux_enterprise_server 9
- Suse suse_linux_openexchange_server 4.0.0
- Suse suse_linux_retail_solution 8.0.0
- Suse suse_linux_school_server_for_i386
- Suse suse_linux_standard_server 8.0.0
- Suse unitedlinux 1.0.0
- Trustix secure_enterprise_linux 2.0.0
- Trustix secure_linux 2.2.0
- Trustix secure_linux 3.0.0
- Turbolinux appliance_server 1.0.0 Hosting Edition
- Turbolinux appliance_server 1.0.0 Workgroup Edition
- Turbolinux appliance_server_hosting_edition 1.0.0
- Turbolinux appliance_server_workgroup_edition 1.0.0
- Turbolinux turbolinux_server 10.0.0
- Turbolinux turbolinux_server 7.0.0
- Turbolinux turbolinux_server 8.0.0
- Turbolinux turbolinux_workstation 7.0.0
- Turbolinux turbolinux_workstation 8.0.0
- Ubuntu ubuntu_linux 5.0.0 4 Amd64
- Ubuntu ubuntu_linux 5.0.0 4 I386
- Ubuntu ubuntu_linux 5.0.0 4 Powerpc
- Ubuntu ubuntu_linux 5.10.0 Amd64
- Ubuntu ubuntu_linux 5.10.0 I386
- Ubuntu ubuntu_linux 5.10.0 Powerpc
References
- BugTraq: 15250
- CVE: CVE-2005-3390
- URL: http://www.php.net/ChangeLog-5.php#5.0.4
- URL: http://www.net-security.org/vuln.php?id=4116