Bug #74238 [Csd]: pt2.php.net subdomain takeover

Edit report at https://bugs.php.net/bug.php?id=74238&edit=1 ID: 74238 Updated by: requinix@php.net Reported by: is4curity at gmail dot com Summary: pt2.php.net subdomain takeover Status: Closed Type: Bug Package: Other web server PHP Version: Irrelevant Assigned To: rasmus Block user comment: N Private report: N New Comment: It still resolves for me from 8.8.8.8/4.4, however querying the php.net nameservers directly gives an empty result. Was the DNS entry not entirely removed? Previous Comments: ------------------------------------------------------------------------ [2017-09-18 21:38:55] is4curity at gmail dot com but the cname stil same before didnot deleted yet see this screen https://i.imgur.com/nB660Ul.png and the cname subdomain is avisable to register see this screen from inside easydns any one can regester it just pay the money see photo https://i.imgur.com/K5cGhVl.png https://i.imgur.com/DNMvAFC.png https://i.imgur.com/JRZ79iP.png best regards mahmoud elmanzalawy ------------------------------------------------------------------------ [2017-03-14 19:00:38] rasmus@php.net I deleted the mirror. It will take a little while to propagate out. ------------------------------------------------------------------------ [2017-03-14 11:22:30] nikic@php.net I've explicitly disabled the mirror and mailed the maintainer. ------------------------------------------------------------------------ [2017-03-14 11:03:41] krakjoe@php.net Rasmus would you mind having a look at this ? Maybe re-assign to someone more appropriate. ------------------------------------------------------------------------ [2017-03-12 07:15:56] is4curity at gmail dot com Description: ------------ hello your subdomain pt2.php.net pointing to php.dominios.pt https://mxtoolbox.com/SuperTool.aspx?action=cname%3apt2.php.net&run=toolpage pt2.php.net. IN CNAME php.dominios.pt and its expire or you can go to here https://my.dominios.pt/orderdomain.php?action=checkAvailability&directForm=1&domains=php&tld%5b%5d=.dominios.pt check about domain php.dominios.pt its Available hacker can register it the domain can claim by anyone so u must delete cname or register the domain again see the photo https://image.ibb.co/b4oUtv/cname.png https://image.ibb.co/n8AaYv/domain_checker.png thanks Expected result: ---------------- the hacker if he register the domain he will add contents he can hack the pt2.php.net vistor ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=74238&edit=1