Bug #74238 [Asn->Csd]: pt2.php.net subdomain takeover

From: Date: Thu, 21 Sep 2017 10:48:22 +0000
Subject: Bug #74238 [Asn->Csd]: pt2.php.net subdomain takeover
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-211299@lists.php.net to get a copy of this message 
Edit report at https://bugs.php.net/bug.php?id=74238&edit=1

 ID:                 74238
 Updated by:         requinix@php.net
 Reported by:        is4curity at gmail dot com
 Summary:            pt2.php.net subdomain takeover
-Status:             Assigned
+Status:             Closed
 Type:               Bug
 Package:            Other web server
 PHP Version:        Irrelevant
 Assigned To:        rasmus
 Block user comment: N
 Private report:     N

 New Comment:

Yup.


Previous Comments:
------------------------------------------------------------------------
[2017-09-21 10:29:02] is4curity at gmail dot com

Hello 
Now i confirm its fixed and the cname is removed

------------------------------------------------------------------------
[2017-09-19 11:51:36] is4curity at gmail dot com

Sorry this is the true url

https://ae.godaddy.com/help/change-a-cname-record-19237

------------------------------------------------------------------------
[2017-09-19 11:39:55] Is4curity at gmail dot com

Hello 
No sir . not entirely removed
See that url explain how remove all cname records 

https://ae.godaddy.com/help/change-a-
cname-record-19237

After you remove all inform me to confirm  it fixed

------------------------------------------------------------------------
[2017-09-19 06:57:13] requinix@php.net

It still resolves for me from 8.8.8.8/4.4, however querying the php.net nameservers directly gives
an empty result. Was the DNS entry not entirely removed?

------------------------------------------------------------------------
[2017-09-18 21:38:55] is4curity at gmail dot com

but the cname stil same before didnot deleted yet

see this screen

https://i.imgur.com/nB660Ul.png

and the cname subdomain is avisable to register see this screen from inside easydns any one can
regester it just pay the money see photo

https://i.imgur.com/K5cGhVl.png

https://i.imgur.com/DNMvAFC.png

https://i.imgur.com/JRZ79iP.png

best regards
mahmoud elmanzalawy

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=74238


--
Edit this bug report at https://bugs.php.net/bug.php?id=74238&edit=1

Thread (10 messages)

« previous php.bugs (#211299) next »