drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Fehlerhafte Zugriffskontrolle in php
Name: |
Fehlerhafte Zugriffskontrolle in php |
|
ID: |
200302-09.1 |
|
Distribution: |
Gentoo |
|
Plattformen: |
Keine Angabe |
|
Datum: |
Do, 20. Februar 2003, 12:00 |
|
Referenzen: |
Keine Angabe |
|
Applikationen: |
PHP |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
--------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200302-09.1 ---------------------------------------------------------------------
PACKAGE : mod_php SUMMARY : arbitrary code execution DATE : 2003-02-19 15:56 UTC EXPLOIT : remote
---------------------------------------------------------------------
This is a re-release of GLSA-200302-09 becuse the first post contained some errors.
- From release notes:
"PHP contains code for preventing direct access to the CGI binary with configure option "--enable-force-cgi-redirect" and php.ini option "cgi.force_redirect". In PHP 4.3.0 there is a bug which renders these options useless."
Read the full release notes at: http://www.php.net/release_4_3_1.php
SOLUTION
It is recommended that all Gentoo Linux users who are running dev-php/mod_php upgrade to mod_php-4.3.1 as follows:
emerge sync emerge -u mod_php emerge clean
--------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at http://cvs.gentoo.org/~aliz rphillips@gentoo.org --------------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE+U6k3fT7nyhUpoZMRAgYGAJ0VuZ3QvRgdFE9MfkrsdpNRQnfNwgCgqDwK agZ3yHaDeGja82rJavna2GY= =r2WB -----END PGP SIGNATURE-----
-- gentoo-security@gentoo.org mailing list
|
|
|
|