Amazon Linux AMI : php (ALAS-2012-77)
High Nessus Plugin ID 69684
SynopsisThe remote Amazon Linux AMI host is missing a security update.
DescriptionA flaw was found in the way the php-cgi executable processed command line arguments when running in CGI mode. A remote attacker could send a specially crafted request to a PHP script that would result in the query string being parsed by php-cgi as command line options and arguments. This could lead to the disclosure of the script's source code or arbitrary code execution with the privileges of the PHP interpreter. (CVE-2012-1823)
SolutionRun 'yum update php' to update your system.