CVE-2012-0807 Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and s...
MediumCVSS 5.1
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hardened-php suhosin | All versions | No fix listed |
| hardened-php suhosin | <= 0.9.31 | No fix listed |
| hardened-php suhosin | = 0.9.0 | No fix listed |
| hardened-php suhosin | = 0.9.1 | No fix listed |
| hardened-php suhosin | = 0.9.2 | No fix listed |
| hardened-php suhosin | = 0.9.3 | No fix listed |
| hardened-php suhosin | = 0.9.4 | No fix listed |
| hardened-php suhosin | = 0.9.5 | No fix listed |
| hardened-php suhosin | = 0.9.6 | No fix listed |
| hardened-php suhosin | = 0.9.6.1 | No fix listed |
| hardened-php suhosin | = 0.9.6.2 | No fix listed |
| hardened-php suhosin | = 0.9.6.3 | No fix listed |
| hardened-php suhosin | = 0.9.7 | No fix listed |
| hardened-php suhosin | = 0.9.8 | No fix listed |
| hardened-php suhosin | = 0.9.9 | No fix listed |
| hardened-php suhosin | = 0.9.9.1 | No fix listed |
| hardened-php suhosin | = 0.9.10 | No fix listed |
| hardened-php suhosin | = 0.9.11 | No fix listed |
| hardened-php suhosin | = 0.9.12 | No fix listed |
| hardened-php suhosin | = 0.9.13 | No fix listed |
| hardened-php suhosin | = 0.9.14 | No fix listed |
| hardened-php suhosin | = 0.9.15 | No fix listed |
| hardened-php suhosin | = 0.9.16 | No fix listed |
| hardened-php suhosin | = 0.9.17 | No fix listed |
| hardened-php suhosin | = 0.9.18 | No fix listed |
Show 12 more
| Product | Affected versions | Fixed in |
|---|---|---|
| hardened-php suhosin | = 0.9.19 | No fix listed |
| hardened-php suhosin | = 0.9.20 | No fix listed |
| hardened-php suhosin | = 0.9.21 | No fix listed |
| hardened-php suhosin | = 0.9.22 | No fix listed |
| hardened-php suhosin | = 0.9.23 | No fix listed |
| hardened-php suhosin | = 0.9.24 | No fix listed |
| hardened-php suhosin | = 0.9.25 | No fix listed |
| hardened-php suhosin | = 0.9.26 | No fix listed |
| hardened-php suhosin | = 0.9.27 | No fix listed |
| hardened-php suhosin | = 0.9.28 | No fix listed |
| hardened-php suhosin | = 0.9.29 | No fix listed |
| hardened-php suhosin | = 0.9.30 | No fix listed |
References
- 20120119 Advisory 01/2012: Suhosin PHP Extension Transparent Cookie Encryption Stack Buffer Overflow exploit mailing-list
- SUSE-SU-2012:0411 vendor-advisory
- openSUSE-SU-2012:0426 vendor-advisory
- SUSE-SU-2012:0472 vendor-advisory
- 48668 third-party-advisory
- [oss-security] 20120124 Re: CVE requests: Suhosin extension / as31 mailing-list
- [oss-security] 20120124 CVE requests: Suhosin extension / as31 mailing-list
- bugzilla.redhat.com
- github.com exploit patch