CVE-2011-1398

Publication date 30 August 2012

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction between the PHP header function and certain browsers, as demonstrated by Internet Explorer and Google Chrome.

Read the notes from the security team

Status

Package Ubuntu Release Status
php5 12.04 LTS precise
Fixed in 5.3.10-1ubuntu3.4
11.10 oneiric
Fixed in 5.3.6-13ubuntu3.9
11.04 natty
Fixed in 5.3.5-1ubuntu7.11
10.04 LTS lucid
Fixed in 5.3.2-1ubuntu4.18
8.04 LTS hardy
Fixed in 5.2.4-2ubuntu5.26

Notes

tyhicks

Incomplete fix is tracked as CVE-2012-4388

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
php5

References

Related Ubuntu Security Notices (USN)

    • USN-1569-1
    • PHP vulnerabilities
    • 17 September 2012

Other references

Access our resources on patching vulnerabilities