CVE-2012-0057: Medium severity PHP PHP vulnerability

Q: What is the severity of CVE-2012-0057?

CVE-2012-0057 is classified as a high-severity vulnerability due to its potential for remote file creation.

Q: How do I fix CVE-2012-0057?

To fix CVE-2012-0057, you should upgrade your PHP version to 5.3.9 or later to ensure the proper libxslt security settings are applied.

Q: What versions of PHP are affected by CVE-2012-0057?

CVE-2012-0057 affects all PHP versions prior to 5.3.9, including various 5.0.x, 5.1.x, 5.2.x, and 5.3.x versions.

Q: Can CVE-2012-0057 be exploited remotely?

Yes, CVE-2012-0057 can be exploited remotely by attackers via crafted XSLT stylesheets.

Q: What are the implications of CVE-2012-0057?

The implications of CVE-2012-0057 include unauthorized file creation on the server, which could lead to further attacks or data compromise.

Published Feb 2, 2012

Updated

PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.

Affected Software

47 affected components

PHP PHP<=5.3.8

PHP PHP=5.0.0

PHP PHP=5.0.0-beta1

PHP PHP=5.0.0-beta2

PHP PHP=5.0.0-beta3

PHP PHP=5.0.0-beta4

PHP PHP=5.0.0-rc1

PHP PHP=5.0.0-rc2

PHP PHP=5.0.0-rc3

PHP PHP=5.0.1

PHP PHP=5.0.2

PHP PHP=5.0.3

PHP PHP=5.0.4

PHP PHP=5.0.5

PHP PHP=5.1.0

PHP PHP=5.1.1

PHP PHP=5.1.2

PHP PHP=5.1.3

PHP PHP=5.1.4

PHP PHP=5.1.5

PHP PHP=5.1.6

PHP PHP=5.2.0

PHP PHP=5.2.1

PHP PHP=5.2.2

PHP PHP=5.2.3

PHP PHP=5.2.4

PHP PHP=5.2.5

PHP PHP=5.2.6

PHP PHP=5.2.7

PHP PHP=5.2.8

PHP PHP=5.2.9

PHP PHP=5.2.10

PHP PHP=5.2.11

PHP PHP=5.2.12

PHP PHP=5.2.13

PHP PHP=5.2.14

PHP PHP=5.2.15

PHP PHP=5.2.16

PHP PHP=5.2.17

PHP PHP=5.3.0

PHP PHP=5.3.1

PHP PHP=5.3.2

PHP PHP=5.3.3

PHP PHP=5.3.4

PHP PHP=5.3.5

PHP PHP=5.3.6

PHP PHP=5.3.7

Remediation

Patch Available

https://bugs.php.net/bug.php?id=54446

Event History

Feb 2, 2012

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0057?

CVE-2012-0057 is classified as a high-severity vulnerability due to its potential for remote file creation.

How do I fix CVE-2012-0057?