Detections
Analytics

MiracleLinux 3 : php-5.1.6-34.0.1.AXS3 (AXSA:2012-548:04)

critical Nessus Plugin ID 284472

Synopsis

The remote MiracleLinux host is missing a security update.

Description

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-548:04 advisory.

 PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated webpages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module which adds support for the PHP language to Apache HTTP Server.
 Security issues fixed in this release:
 CVE-2012-1823 sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php- cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://tsn.miraclelinux.com/en/node/3045

Plugin Details

Severity: Critical

ID: 284472

File Name: miracle_linux_AXSA-2012-548.nasl

Version: 1.1

Type: local

Published: 1/14/2026

Updated: 1/14/2026

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.9

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2012-1823

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:miracle:linux:php-xml, p-cpe:/a:miracle:linux:php-soap, p-cpe:/a:miracle:linux:php-snmp, p-cpe:/a:miracle:linux:php-bcmath, p-cpe:/a:miracle:linux:php-cli, p-cpe:/a:miracle:linux:php-pgsql, p-cpe:/a:miracle:linux:php-oci8, p-cpe:/a:miracle:linux:php-mysql, p-cpe:/a:miracle:linux:php, p-cpe:/a:miracle:linux:php-gd, cpe:/o:miracle:linux:3, p-cpe:/a:miracle:linux:php-ldap, p-cpe:/a:miracle:linux:php-devel, p-cpe:/a:miracle:linux:php-ncurses, p-cpe:/a:miracle:linux:php-odbc, p-cpe:/a:miracle:linux:php-dba, p-cpe:/a:miracle:linux:php-xmlrpc, p-cpe:/a:miracle:linux:php-imap, p-cpe:/a:miracle:linux:php-pdo, p-cpe:/a:miracle:linux:php-mbstring, p-cpe:/a:miracle:linux:php-common

Required KB Items: Host/local_checks_enabled, Host/MiracleLinux/release, Host/MiracleLinux/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/15/2012

Vulnerability Publication Date: 5/4/2012

Exploitable With

CANVAS (CANVAS)

Core Impact

Reference Information

CVE: CVE-2012-1823