note 54886 added to ref.info
| From: | james at gogo dot co dot nz | Date: | Mon, 18 Jul 2005 23:30:23 +0000 |
| Subject: | note 54886 added to ref.info | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-92133@lists.php.net to get a copy of this message | ||
WARNING: enable_dl/dl()
*********************
There is an exploit circulating currently which takes advantage of dl() to inject code into Apache
which causes all requests to all virtual hosts to be redirected to a page of the attackers choice.
All operators of shared web hosting servers with Apache and PHP should disable dl() by setting
enable_dl to off otherwise your servers are vulnerable to this exploit.
This exploit is generally known as flame.so (the object that is loaded into Apache) and flame.php
(the php script that loads it).
Google gives more information:
http://www.google.co.nz/search?q=flame.so+flame.php
----
Manual Page -- http://www.php.net/manual/en/ref.info.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+54886
Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+54886&report=yes&reason=added+to+the+manual
Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+54886&report=yes&reason=bad+code
Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+54886&report=yes&reason=spam
Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+54886&report=yes&reason=useless
Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+54886&report=yes&reason=non-english
Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+54886&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+54886&report=yes
Search -- http://master.php.net/manage/user-notes.php