CVE-2008-0599: Apple Mac OS X

Critical severity, CVSS 9.8. EPSS: 10.9% chance of exploitation in the next 30 days.

The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.

Affected products

• Apple Mac OS X: before 10.5.4 (fixed in 10.5.4)
• Apple Mac OS X Server: before 10.5.4 (fixed in 10.5.4)
• Canonical Ubuntu Linux: version 6.06 only; version 7.04 only; version 7.10 only; version 8.04 only
• Fedoraproject Fedora: version 8 only; version 9 only
• PHP PHP: before 5.2.6 (fixed in 5.2.6)

Published 2008-05-05. Last modified 2026-06-16.