Description
The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | php5 | 5.2.5-3+lenny1 | DTSA-135-1 |
| Debian 4.0 | php4 | 6:4.4.4-8+etch6 | DSA-1578-1 |
| Debian 4.0 | php5 | 5.2.0-8+etch11 | DSA-1572-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | php +18 | 5.1.6-20.el5_2.1 | RHSA-2008:0544 |
| RHEL 4 | php +13 | 4.3.9-3.22.12 | RHSA-2008:0545 |
| RHEL 3 | php +6 | 4.3.2-48.ent | RHSA-2008:0544 |
| RHEL 2 | php +7 | 4.1.2-2.20 | RHSA-2008:0546 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Application Stack 2 | httpd +2 | 2.2.8-1.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | mod_jk +1 | 1.2.26-1.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | mod_perl +1 | 2.0.4-3.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | mod_ssl | 1:2.2.8-1.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | mysql +6 | 5.0.50sp1a-2.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | mysql-connector-odbc | 3.51.24r1071-1.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | mysql-jdbc | 5.0.8-1jpp.1.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | perl-DBD-MySQL | 4.006-1.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | perl-DBI | 1.604-1.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | php +18 | 5.2.6-2.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | postgresql +11 | 8.2.9-1.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | postgresql-jdbc | 8.2.508-1jpp.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | postgresql-odbc | 08.02.0500-1.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | postgresqlclient81 | 8.1.11-1.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 2 | unixODBC +2 | 2.2.12-8.el5s2 | RHSA-2008:0505 |
| Red Hat Rhel Application Stack 1 | php +18 | 5.1.6-3.el4s1.10 | RHSA-2008:0582 |
Advisories 8
- RHSA-2008:0546 Red Hat Security Advisory: php security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0544 Red Hat Security Advisory: php security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0545 Red Hat Security Advisory: php security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1572-1 php5 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1578-1 php4 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-135-1 php5 - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2008:0505 Red Hat Security Advisory: Red Hat Application Stack v2.1 security and enhancement update Red Hat Security Advisories (RHSA) · Jan 14, 2026
- RHSA-2008:0582 Red Hat Security Advisory: php security update Red Hat Security Advisories (RHSA) · Jan 8, 2026
References
- ADV-2008-1412 vdb-entry
- 20080523 rPSA-2008-0176-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl mailing-list
- 30288 third-party-advisory
- FEDORA-2008-3606 vendor-advisory
- 32746 third-party-advisory
- 30083 third-party-advisory
- APPLE-SA-2008-07-31 vendor-advisory
- GLSA-200811-05 vendor-advisory
- RHSA-2008:0546 vendor-advisory
- FEDORA-2008-3864 vendor-advisory
- oval:org.mitre.oval:def:10256 vdb-entry signature
- 29009 vdb-entry
- 30828 third-party-advisory
- MDVSA-2008:128 vendor-advisory
- ADV-2008-2268 vdb-entry
- DSA-1572 vendor-advisory
- RHSA-2008:0582 vendor-advisory
- 30345 third-party-advisory
- USN-628-1 vendor-advisory
- RHSA-2008:0545 vendor-advisory
- 31124 third-party-advisory
- 30967 third-party-advisory
- 31119 third-party-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176
- [oss-security] 20080502 CVE Request (PHP) mailing-list
- 20080527 rPSA-2008-0178-1 php php-mysql php-pgsql mailing-list
- 30411 third-party-advisory
- 30158 third-party-advisory
- http://www.php.net/ChangeLog-5.php
- 31200 third-party-advisory
- SSA:2008-128-01 vendor-advisory
- 30757 third-party-advisory
- RHSA-2008:0544 vendor-advisory
- DSA-1578 vendor-advisory
- SUSE-SR:2008:014 vendor-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178
- MDVSA-2008:125 vendor-advisory
- 31326 third-party-advisory
- https://issues.rpath.com/browse/RPL-2503
- RHSA-2008:0505 vendor-advisory
- MDVSA-2008:126 vendor-advisory
- MDVSA-2008:127 vendor-advisory
- 30048 third-party-advisory