HTTP: PHP GLOBALS Variable Overwrite

This signature detects attempts to misuse the PHP GLOBALS variable. PHP 5.0.3 and earlier versions are vulnerable. Attackers can overwrite the GLOBALS variable.

Extended Description

PHP is prone to a vulnerability that allows attackers to overwrite the GLOBAL variable via HTTP POST requests. By exploiting this issue, remote attackers may be able to overwrite the GLOBAL variable. This may allow attackers to further exploit latent vulnerabilities in PHP scripts.

Affected Products

Hp system_management_homepage

References

BugTraq: 15250

CVE: CVE-2005-3390

URL: http://www.php.net/ChangeLog-5.php#5.0.4 http://www.net-security.org/vuln.php?id=4116

Short Name

HTTP:PHP:GLOBALS-INJ

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: PHP GLOBALS Variable Overwrite

Extended Description

Affected Products

References

Found a potential security threat?