jetlib.sec » Bugtraq » PHP 5.2.x Remote Code Execution Vulnerability

Feeds

132969 items (1 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities (1 unread)
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Bugtraq

• February 17, 2012
• 

  PHP 5.2.x Remote Code Execution Vulnerability

  Posted: February 17th, 2012, 9:15am PST

  Tags:   

  Posted by Worawit Wang on Feb 17

  Release Date: 17 February 2012
  Affected Versions: 5.2.0 - 5.2.17 (unsupported version)
  
  ------------------------------------------------------------------------------------------
  
  Description:
  
  If PHP bails out in startup stage before setting PG(modules_activated)
  to 1, the filter_globals struct is not cleaned up on shutdown stage.
  The subsequence request will use uncleaned value in filter_globals
  struct. With special crafted request, this...