Re: PHP 4.0 Bug #6980: PHP ATTACK
| From: | Derick Rethans | Date: | Mon, 02 Oct 2000 14:56:49 +0000 |
| Subject: | Re: PHP 4.0 Bug #6980: PHP ATTACK | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-34018@lists.php.net to get a copy of this message | ||
benjr@elo.com.br wrote:
> From: benjr@elo.com.br
> Operating system: RedHat 6.2
> PHP version: 4.0.2
> PHP Bug Type: *General Issues
> Bug description: PHP ATTACK
>
> I don't know if this can be treated as a BUG. A client has developed a malicious PHP code
> and put it in my http server. The code opens a connection to the local web server (Apache 1.3.12)
> and to the local database server (MySQL 3.23.24) in a endless loop causing the both servers to
> crash.
> Is there a way to fix that ?
Consider you client as being no client anymore and kick him of your system.
--
Derick Rethans
JDI Media Solutions
H.v.Tussenbroekstraat 1
6952 BL Dieren
The Netherlands
e-mail: d.rethans@jdimedia.nl
http://www.jdimedia.nl/