Hole in PHP could give attacker server control     Date: Jul 23 2002 The vulnerability affects PHP 4.2.0 and 4.2.1 and comes as a result of a flaw in the HTTP POST parser component of PHP. The HTTP POST parser is used to differentiate between files and variables sent by users to a Web server through Web forms, according to the alert. Insufficient checking in the parser could allow an attacker to crash the server, execute code or even take control of the system, The PHP Group said. Read full article Read full article in new window Today's headlines Headlines for Jul 23, 2002
Comments: feedback (at) linux.org Advertising: banners (at) linux.org Copyright Linux Online Inc. Compilation ©1994-2008 Linux Online, Inc. All rights reserved.