Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:PHP:PHPUNIT-INJECTION

Severity

Major

Recommended

Yes

Category

HTTP

Keywords

PHPUnit PHP Remote Code Execution

Release Date

2019/09/19

Update Number

3209

Supported Platforms

idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: PHPUnit PHP Remote Code Execution


This signature detects attempts to exploit a known vulnerability against PHPUnit. A successful attack can lead to arbitrary code execution.

Extended Description

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "

Affected Products

  • Phpunit_project phpunit 4.8.27
  • Phpunit_project phpunit 5.0.0
  • Phpunit_project phpunit 5.0.1
  • Phpunit_project phpunit 5.0.10
  • Phpunit_project phpunit 5.0.2
  • Phpunit_project phpunit 5.0.3
  • Phpunit_project phpunit 5.0.4
  • Phpunit_project phpunit 5.0.5
  • Phpunit_project phpunit 5.0.6
  • Phpunit_project phpunit 5.0.7
  • Phpunit_project phpunit 5.0.8
  • Phpunit_project phpunit 5.0.9
  • Phpunit_project phpunit 5.1.0
  • Phpunit_project phpunit 5.1.2
  • Phpunit_project phpunit 5.1.3
  • Phpunit_project phpunit 5.1.4
  • Phpunit_project phpunit 5.1.5
  • Phpunit_project phpunit 5.1.6
  • Phpunit_project phpunit 5.1.7
  • Phpunit_project phpunit 5.2.0
  • Phpunit_project phpunit 5.2.1
  • Phpunit_project phpunit 5.2.10
  • Phpunit_project phpunit 5.2.11
  • Phpunit_project phpunit 5.2.12
  • Phpunit_project phpunit 5.2.2
  • Phpunit_project phpunit 5.2.3
  • Phpunit_project phpunit 5.2.4
  • Phpunit_project phpunit 5.2.5
  • Phpunit_project phpunit 5.2.6
  • Phpunit_project phpunit 5.2.7
  • Phpunit_project phpunit 5.2.8
  • Phpunit_project phpunit 5.2.9
  • Phpunit_project phpunit 5.3.0
  • Phpunit_project phpunit 5.3.1
  • Phpunit_project phpunit 5.3.2
  • Phpunit_project phpunit 5.3.3
  • Phpunit_project phpunit 5.3.4
  • Phpunit_project phpunit 5.3.5
  • Phpunit_project phpunit 5.4.0
  • Phpunit_project phpunit 5.4.1
  • Phpunit_project phpunit 5.4.2
  • Phpunit_project phpunit 5.4.3
  • Phpunit_project phpunit 5.4.4
  • Phpunit_project phpunit 5.4.5
  • Phpunit_project phpunit 5.4.6
  • Phpunit_project phpunit 5.4.7
  • Phpunit_project phpunit 5.4.8
  • Phpunit_project phpunit 5.5.0
  • Phpunit_project phpunit 5.5.1
  • Phpunit_project phpunit 5.5.2
  • Phpunit_project phpunit 5.5.3
  • Phpunit_project phpunit 5.5.4
  • Phpunit_project phpunit 5.5.5
  • Phpunit_project phpunit 5.5.6
  • Phpunit_project phpunit 5.5.7
  • Phpunit_project phpunit 5.6.0
  • Phpunit_project phpunit 5.6.1
  • Phpunit_project phpunit 5.6.2

References

  • CVE: CVE-2017-9841

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out