PHP 4.0 Bug #6351 Updated: '%'-characters in syslog()-function
| From: | Bug Database | Date: | Sun, 27 Aug 2000 10:03:48 +0000 |
| Subject: | PHP 4.0 Bug #6351 Updated: '%'-characters in syslog()-function | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-30805@lists.php.net to get a copy of this message | ||
ID: 6351
Updated by: stas
Reported By: jjaakkol@cs.helsinki.fi
Status: Analyzed
Bug Type: Misbehaving function
Assigned To:
Comments:
Seems to be a real bug. We should or require parameters for %-s, or inhibit them at all, and use %s
for it.
Contrary to what user says, I do not see a way to exploit it actively (like, for modifying any data
on the server), but this can easily lead for crash, since garbage pointer is referenced.
Full Bug description available at: http://bugs.php.net/?id=6351