#46079 [Opn->Csd]: open_basedir can be by-pass from "PatriotCracker C99Shell" (defined as virus)
| From: | michele at micheleschiavo dot it | Date: | Mon, 15 Sep 2008 19:57:33 +0000 |
| Subject: | #46079 [Opn->Csd]: open_basedir can be by-pass from "PatriotCracker C99Shell" (defined as virus) | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-129000@lists.php.net to get a copy of this message | ||
ID: 46079
User updated by: michele at micheleschiavo dot it
Reported By: michele at micheleschiavo dot it
-Status: Open
+Status: Closed
Bug Type: Safe Mode/open_basedir
Operating System: linux
PHP Version: 5.2.6
New Comment:
this "virus" use posix* function
Previous Comments:
------------------------------------------------------------------------
[2008-09-14 20:44:40] michele at micheleschiavo dot it
Description:
------------
i set open_basedir "/var/www/ "in php.ini and if i try fopen
/etc/passwd, php report the warning and not open /etc/passwd, but the
"malware" script can read /etc/passwd.
Expected result:
----------------
open_basedir will work
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=46079&edit=1