CVE-2011-4885
PHP < 5.3.9 - Denial of Service via Hash Collision in Form Parameter Handling
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2011-4885.
PoCs published by Christian Mehlmauer, infodox, Alexander Klink, Julian Waelde, Scott A. Crosby, Dan S. Wallach, Krzysztof Kotowicz, Christian Mehlmauer, including Metasploit module auxiliary/dos/http/hashcollision_dos.
AI-analyzed exploit summary This script exploits a hash collision vulnerability (CVE-2011-4885) in PHP by generating malicious POST data that causes excessive CPU usage due to hash table collisions. It supports multiple targets (PHP, Java, ASP) and can perform DoS attacks by sending multiple requests.
Description
PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Exploits (4)
This script exploits a hash collision vulnerability (CVE-2011-4885) in PHP by generating malicious POST data that causes excessive CPU usage due to hash table collisions. It supports multiple targets (PHP, Java, ASP) and can perform DoS attacks by sending multiple requests.
This exploit leverages a hash collision vulnerability in PHP 5.3.* to perform a Denial of Service (DoS) attack by sending specially crafted POST data to the target server. It repeatedly sends the payload to exhaust server resources.
This exploit demonstrates a SQL injection vulnerability in MyBulletinBoard (MyBB) <= 1.1.5 via the CLIENT-IP HTTP header, allowing an attacker to extract the admin login key and create a new admin user.
This Metasploit module exploits a denial-of-service (DoS) vulnerability in PHP and Java web servers by generating hash collisions in POST parameters, causing excessive CPU consumption. It supports both PHP and Java hash functions and includes configurable payload generation.