Multiple vulnerabilities in PHP 4/5

Hardened-PHP Project
www.hardened-php.net
-= Security Advisory =-

Advisory: Multiple vulnerabilities within PHP 4/5
Release Date: 2004/12/15
Last Modified: 2004/12/15
Author: Stefan Esser [sesser@php.net]

Application: PHP4 <= 4.3.9
PHP5 <= 5.0.2
Severity: Several vulnerabilities within PHP allow local and remote execution of arbitrary code

Risk: Critical
Vendor Status: Vendor has released bugfixed versions.
References: http://www.hardened-php.net/advisories/012004.txt

Vinay

Light Poster

29 posts since Oct 2004

Reputation Points: 10

Solved Threads: 0

7 Years Ago

yep, very big news across PHP land. it especially makes forums such as phpBB, vBulletin, Invision, etc. vulnerable to attacks because of the loads of info ; or that might be the other vulnerability? :(

Gary King

PHP/vBulletin Guru

Team Colleague

417 posts since Nov 2003

Reputation Points: 53

Solved Threads: 5

This article has been dead for over three months

You