Re: Hello I have found major security flaw

From: Date: Sun, 25 Jan 2004 21:56:32 +0000
Subject: Re: Hello I have found major security flaw
References: 1  Groups: php.mirrors 
Request: Send a blank email to php-mirrors+get-23169@lists.php.net to get a copy of this message
Hi Sam! security@php.net is for security related mails. It is not publicly archived... Regards, Goba Sam Jadali wrote:
Hello, I believe I have found a major security flaw and am not sure I should put it in the bug system since many people would likely see it. One of my servers was compromised and I believe I have find out how. Please let me know ASAP. Please provide me an email address where I can send it to or if I should go ahead and submit it to the bug system. Anyone with a written PHP file can gain access to a server thru an exploit even with PHP-Safe mode On. If someone obtains an account on a linux server, and then uploads this php script you can easily gain access. Regards, Sam Jadali 515-556-6663


« previous php.mirrors (#23169) next »