Re: Voulnerability in 3.*-4.*
| From: | Sascha Schumann | Date: | Sat, 08 Jan 2000 13:57:07 +0000 |
| Subject: | Re: Voulnerability in 3.*-4.* | ||
| References: | 1 2 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-14407@lists.php.net to get a copy of this message | ||
On Sat, Jan 08, 2000 at 05:13:46PM +0300, vvs_php@nsrd.npi.msu.su wrote:
>
>
> On Sat, 8 Jan 2000 rasmus@php.net wrote:
>
> >
> > I don't need access, just a little PHP example script that causes the
> > problem. So, you are saying that:
> >
> > <?
> > unlink("/foo/foo/foo/blah");
> > ?>
> yes, like so.
> Also, try to compile and run:
> --------------------------------------------
> #include <stdio.h>
> #include <unistd.h>
> #include <sys/stat.h>
>
> char fn[]="/foo/foo/foo/blah";
Constant strings are by default not writable. Compile with
-fwritable-strings, if that is the desired behaviour.
--
Regards,
Sascha Schumann
Consultant