Re: nginx + php-fcgi : 0day exploit ?
| From: | Ferenc Kovacs | Date: | Fri, 30 Jul 2010 08:08:50 +0000 |
| Subject: | Re: nginx + php-fcgi : 0day exploit ? | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-49184@lists.php.net to get a copy of this message | ||
2010/5/21 Jérôme Loyet <jerome@loyet.net>:
> Hi guys,
>
> On the nginx mailing list, there is an interesting conversation about
> the usage of php through fastcgi with nginx which can cause a security
> hole:
> http://forum.nginx.org/read.php?2,88845
>
> I don't really know the origin of the fix_pathinfo ini variable. So I
> don't know if it's really a bug or a mis-configuration.
>
> What do you think ?
>
> ++ Jerome
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
bump.
Tyrael