Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user

From:	heer2351 at zonnet dot nl	Date:	Wed, 24 Mar 2010 23:17:50 +0000
Subject:	Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
References:	1	Groups:	php.bugs
Request:	Send a blank email to php-bugs+get-148972@lists.php.net to get a copy of this message

Edit report at http://bugs.php.net/bug.php?id=27051&edit=1

 ID:               27051
 Comment by:       heer2351 at zonnet dot nl
 Reported by:      ghoffer at globalscape dot com
 Summary:          Impersonation with FastCGI does not EXEC process as
                   impersonated user
 Status:           Feedback
 Type:             Bug
 Package:          CGI related
 Operating System: Windows
 PHP Version:      5.3
 Assigned To:      pajoye

 New Comment:

Changed to your suggestion with \\, same error.

Changed to 5.2.13 ran my version and your version both echo the correct
username.


Previous Comments:
------------------------------------------------------------------------
[2010-03-25 00:13:31] heer2351 at zonnet dot nl

What I do not understand is that 5.2.13 works and 5.3.2 (or 5.3.3) does
not work with the same configuration.

------------------------------------------------------------------------
[2010-03-25 00:11:56] pajoye@php.net

echo exec('c:\Windows\System32\whoami'); can't work.

echo exec('c:\\Windows\\System32\\whoami'); should work.

------------------------------------------------------------------------
[2010-03-25 00:09:56] heer2351 at zonnet dot nl

Box is behind a company firewall so you can unfortunately not access
it.
This is an intranet site.

------------------------------------------------------------------------
[2010-03-25 00:08:31] heer2351 at zonnet dot nl

This is what I ran:
<?php
echo exec('c:\Windows\System32\whoami');
?> 

ProcMon shows cmd.exe being started by php-cgi.exe
A thread is created running as the correct user.
Excecuted command is: cmd.exe /c "c:\Windows\System32\whoami"

I do notice that the process exits with Exit Status 5, which is normally
access denied.

I have however already tried to give Everyone full access to the whole
machine, i.e. all drives. Still the same error.

------------------------------------------------------------------------
[2010-03-25 00:04:10] pajoye@php.net

btw, is it possible to access this box? I could try to debug what's
wrong there as it works just fine with the same constellation here (same
windows, IIS and fcgi versions).

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    http://bugs.php.net/bug.php?id=27051


-- 
Edit this bug report at http://bugs.php.net/bug.php?id=27051&edit=1


   

Thread (50 messages)

• ghoffer at globalscape dot comMon, 26 Jan 2004 20:41:15 +0000
  • aheckmann at m-s dot deThu, 21 Jun 2007 18:06:46 +0000#27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • louis at steelbytes dot comMon, 08 Dec 2008 23:04:23 +0000#27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • louis at steelbytes dot comTue, 09 Dec 2008 00:45:44 +0000#27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • tgross at m-s dot deWed, 24 Jun 2009 15:12:12 +0000#27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • nathan at andersonsplace dot netThu, 27 Aug 2009 19:17:38 +0000#27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netThu, 27 Aug 2009 22:20:40 +0000#27051 [Opn->Asn]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netTue, 01 Sep 2009 22:51:47 +0000#27051 [Asn->Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • benadler at gmx dot netThu, 03 Sep 2009 15:52:25 +0000#27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netThu, 03 Sep 2009 21:17:46 +0000#27051 [Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • benadler at gmx dot netSun, 06 Sep 2009 18:13:09 +0000#27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • benadler at gmx dot netMon, 07 Sep 2009 11:11:06 +0000#27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • benadler at gmx dot netMon, 07 Sep 2009 11:17:14 +0000#27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netMon, 07 Sep 2009 11:34:10 +0000#27051 [Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • benadler at gmx dot netMon, 07 Sep 2009 22:42:29 +0000#27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netTue, 08 Sep 2009 17:58:55 +0000#27051 [Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netTue, 22 Sep 2009 20:04:57 +0000#27051 [NoF->Asn]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netTue, 22 Sep 2009 20:11:10 +0000#27051 [Asn->Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • louis at steelbytes dot comFri, 20 Nov 2009 00:52:52 +0000#27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • jfjauvin at gmail dot comWed, 03 Feb 2010 00:13:23 +0000#27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 03 Feb 2010 00:38:52 +0000#27051 [NoF->Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 20:43:39 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 21:08:59 +0000Bug #27051 [NoF->Csd]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 21:09:25 +0000Bug #27051 [Csd]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 21:14:23 +0000Bug #27051 [Csd]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 21:45:31 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 21:48:18 +0000Bug #27051 [Csd]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 21:51:11 +0000Bug #27051 [Csd]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 22:04:59 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 22:07:39 +0000Bug #27051 [Csd->Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 22:17:05 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 22:22:19 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 22:39:38 +0000Bug #27051 [Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 22:40:45 +0000Bug #27051 [Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 22:50:21 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 22:53:10 +0000Bug #27051 [Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 22:56:21 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 22:58:27 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 23:00:09 +0000Bug #27051 [Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 23:04:10 +0000Bug #27051 [Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 23:08:31 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 23:09:56 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 23:11:57 +0000Bug #27051 [Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 23:13:33 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 23:17:50 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 23:30:20 +0000Bug #27051 [Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlWed, 24 Mar 2010 23:40:56 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netWed, 24 Mar 2010 23:45:36 +0000Bug #27051 [Fbk]: Impersonation with FastCGI does not EXEC process as impersonated user
  • heer2351 at zonnet dot nlThu, 25 Mar 2010 12:08:22 +0000Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user
  • pajoye@php.netThu, 25 Mar 2010 13:33:05 +0000Bug #27051 [Fbk->Tbd]: Impersonation with FastCGI does not EXEC process as impersonated user