PHP 4.0 Bug #6642 Updated: Userspace exploit crashes web-serving machine

ID: 6642 Updated by: sniper Reported By: macabre@fl.rr.com Old-Status: Closed Status: Open Bug Type: Feature/Change Request Assigned To: Comments: Previous Comments: --------------------------------------------------------------------------- [2000-12-29 12:30:04] jmoore@php.net OK for me it isnt that bad.. each apache process dies in turn but the computer is still 100% usable even with 1000 requests, the usage of apache grows then apache becomes defunct at which point another process is started. This is with apache as mod_php and CGI. CHanging this to a feature change request as your asking that a script cannot include itself. James --------------------------------------------------------------------------- [2000-12-23 21:07:12] jmoore@php.net I will test to see if this is the case if so I doubt there will be a fix due to speed but maybe somthing for a future safemode improvemnt. James --------------------------------------------------------------------------- [2000-09-09 15:01:25] macabre@fl.rr.com Using: Apache 1.3.12/PHP4 with MySQL support I have recently discovered a bug in PHP 4 (but not specifically 4) which unviels the fact that any user on the system can crash the machine with a very simple PHP document. They can do this by using the Include() function to include the same document being loaded, causing a serious recursion problem which will quickly max out CPU and memory usage of the web-serving machine, especially if a phpInfo() call is done before the Include() I am currently working on a patch for this. Here is the exploitable code: index.php: <html lang="en"> <body> <?php phpInfo(); ?> <?php Include("./index.php"); ?> </body> </html> --------------------------------------------------------------------------- Full Bug description available at: http://bugs.php.net/?id=6642