Description
The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | php +13 | 4.3.9-3.9 | RHSA-2005:831 |
| RHEL 3 | php +6 | 4.3.2-26.ent | RHSA-2005:831 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | php7 | 7.4.24-1.1 | openSUSE-SU-2024:11167-1 |
| openSUSE Tumbleweed | php8 | 8.0.11-1.1 | openSUSE-SU-2024:11169-1 |
Advisories 3
- RHSA-2005:831 Red Hat Security Advisory: php security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- openSUSE-SU-2024:11167-1 php7-7.4.24-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11169-1 php8-8.0.11-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 15249 vdb-entry
- 21252 third-party-advisory
- 22691 third-party-advisory
- 134 third-party-advisory
- MDKSA-2005:213 vendor-advisory
- RHSA-2005:831 vendor-advisory
- TLSA-2006-38 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm
- 18198 third-party-advisory
- SSRT061238 vendor-advisory
- 18054 third-party-advisory
- ADV-2005-2254 vdb-entry
- 20051031 Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str() mailing-list
- 1015131 vdb-entry
- http://www.hardened-php.net/advisory_192005.78.html
- 17559 third-party-advisory
- FLSA:166943 vendor-advisory
- 17371 third-party-advisory
- ADV-2006-4320 vdb-entry
- RHSA-2006:0549 vendor-advisory
- 17490 third-party-advisory
- SUSE-SA:2005:069 vendor-advisory
- oval:org.mitre.oval:def:11481 vdb-entry signature
- http://www.php.net/release_4_4_1.php
- 17510 third-party-advisory
- 17531 third-party-advisory
- OpenPKG-SA-2005.027 vendor-advisory
- 18669 third-party-advisory
- 17557 third-party-advisory
- GLSA-200511-08 vendor-advisory
- USN-232-1 vendor-advisory
- RHSA-2005:838 vendor-advisory
- SUSE-SR:2005:027 vendor-advisory