Bug #15736 Updated: Security Exploit

ID: 15736 Updated by: spinaltapx@yahoo.com Reported By: n2wog@usa.net Status: Closed Bug Type: Unknown/Other Function Operating System: All UNIX PHP Version: 4.1.1 New Comment: What is the command to install this PHP 4.0.6 patch? Solarix 8x86 doesn't have a "patch -u" option... I also tried: patch -p1 rfc1867.c.diff-4.0.6.PHPpatch patch -c rfc1867.c.diff-4.0.6.PHPpatch patch -irfc1867.c.diff-4.0.6.PHPpatch # ls -laF -rw-r--r-- 1 bin bin 6802 Feb 28 18:21 rfc1867.c.diff-4.0.6.PHPpatch -rw-r--r-- 1 bin bin 310 Feb 28 19:44 rfc1867.h -rw-r--r-- 1 bin bin 310 Sep 9 2000 rfc1867.h.prePHPpatch Help! Thanks guys. Previous Comments: ------------------------------------------------------------------------ [2002-02-28 18:18:05] sniper@php.net I was wrong, the exploit is fixed. Rasmus fixed just one segfault. ------------------------------------------------------------------------ [2002-02-28 12:46:48] jflemer@php.net Shouldn't the patch on the downloads page also include this patch by Rasmus? http://cvs.php.net/diff.php/php4/main/rfc1867.c?r1=1.71.2.2&r2=1.71.2.3&ty=u ------------------------------------------------------------------------ [2002-02-28 02:27:52] sniper@php.net ..and I take this back, it's fixed in CVS but not in any release. ------------------------------------------------------------------------ [2002-02-28 02:11:04] sniper@php.net This bug has already been fixed in the latest released version of PHP, which you can download at http://www.php.net/downloads.php ------------------------------------------------------------------------ [2002-02-27 20:54:47] denis@ikke.no The patch for file rfc1867.c applied to php 4.0.6 seems to not work when trying to upload from Opera 6.01 (on Windows). Uploading in Internet Explorer (6.0) seems to work allright, whereas uploading with Opera simply either times out or just fails (without any errors). ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/15736 -- Edit this bug report at http://bugs.php.net/?id=15736&edit=1