PHP 4.0 Bug #5937: Path revealing security hole
| From: | expert at securiteam dot com | Date: | Thu, 03 Aug 2000 06:08:04 +0000 |
| Subject: | PHP 4.0 Bug #5937: Path revealing security hole | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-27513@lists.php.net to get a copy of this message | ||
From: expert@securiteam.com
Operating system: All
PHP version: 4.0.1pl2
PHP Bug Type: Other
Bug description: Path revealing security hole
Description:
All the initial pages of the Internet with (.php4), can be affected with this bug.
When going to "www.example.com/something.php3",
the server will return a page with " Fatal Error " and will show the directory where the
page's true location is.
Example:
"Fatal error: Unable to open /vhmap/i/n/t/exemplo.com.br/todos.php3 in - on line 0
No input file specified."