|
ru.nethack
- RU.NETHACK -------------------------------------------------------------------
From : Dexim 2:5020/400 16 Mar 2002 18:04:50
To : Anton Fedorov
Subject : Re: analiz dostupnyh servisov
--------------------------------------------------------------------------------
On Fri, Mar 15, 2002 at 06:52:26PM +0300, Anton Fedorov wrote:
> Четверг Март 14 2002 23:40, Nikolay Pichtin НН. Anton Fedorov:
> KS>>> http/80
> KS>>> Apache/1.3.22 (Unix) PHP/4.0.6 rus/PL30.9
> AF>> ^^^^^^^^^^^^^
> AF>> о! зияющая бpешь!
> AF>> http://security.e-matters.de/advisories/012002.html
> NP> А рассказать можешь об этой дыре?
CERT Advisory CA-2002-05 Multiple Vulnerabilities in PHP fileupload
Original release date: February 27, 2002
Last revised: --
Source: CERT/CC
A complete revision history can be found at the end of this file.
Systems Affected
* Web servers running PHP
Overview
Multiple vulnerabilities exist in the PHP scripting language. These
vulnerabilities could allow a remote attacker to execute arbitrary
code with the privileges of the PHP process.
I. Description
PHP is a scripting language widely used in web development. PHP can be
installed on a variety of web servers, including Apache, IIS, Caudium,
Netscape and iPlanet, OmniHTTPd and others. Vulnerabilities in the
php_mime_split function may allow an intruder to execute arbitrary
code with the privileges of the web server. For additional details,
see
http://security.e-matters.de/advisories/012002.html
Web servers that do not have PHP installed are not affected by this
vulnerability.
The CERT/CC is tracking this set of vulnerabilities as VU#297363. At
this time, these vulnerabilities have not been assigned a CVE
identifier.
II. Impact
Intruders can execute arbitrary code with the privileges of the web
server, or interrupt normal operations of the web server.
III. Solution
Apply a Patch
Upgrade to PHP version 4.1.2, available from
http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz
> сегодня ночеpом скачаю сыpки пpавленного PHP, и бyдy смотpеть что они
> заткнyли по сpавнению с непpавленной :) ибо эти-то не выложили эксплойт...
Кстати может они наложили патч :
http://www.php.net/do_download.php?download_file=rfc1867.c.diff-4.0.6.gz
Так что тут 50/50 что дыра осталась .
--
[Dexim] http://cydem.org.ua mailto:dexim@cydem.zp.ua
--- ifmail v.2.15dev5
* Origin: A poorly-installed InterNetNews site (2:5020/400)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
|
