Hello I have found major security flaw
| From: | Sam Jadali | Date: | Sun, 25 Jan 2004 20:32:13 +0000 |
| Subject: | Hello I have found major security flaw | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-23168@lists.php.net to get a copy of this message | ||
Hello, I believe I have found a major security flaw and am not sure I should
put it in the bug system since many people would likely see it.
One of my servers was compromised and I believe I have find out how.
Please let me know ASAP.
Please provide me an email address where I can send it to or if I should go
ahead and submit it to the bug system.
Anyone with a written PHP file can gain access to a server thru an exploit
even with PHP-Safe mode On.
If someone obtains an account on a linux server, and then uploads this php
script you can easily gain access.
Regards,
Sam Jadali
515-556-6663