note 54887 added to function.dl

From: Date: Mon, 18 Jul 2005 23:30:58 +0000
Subject: note 54887 added to function.dl
Groups: php.notes 
Request: Send a blank email to php-notes+get-92134@lists.php.net to get a copy of this message
WARNING: enable_dl/dl() ********************* There is an exploit circulating currently which takes advantage of dl() to inject code into Apache which causes all requests to all virtual hosts to be redirected to a page of the attackers choice. All operators of shared web hosting servers with Apache and PHP should disable dl() by setting enable_dl to off otherwise your servers are vulnerable to this exploit. This exploit is generally known as flame.so (the object that is loaded into Apache) and flame.php (the php script that loads it). Google gives more information: http://www.google.co.nz/search?q=flame.so+flame.php ---- Manual Page -- http://www.php.net/manual/en/function.dl.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+54887 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+54887&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+54887&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+54887&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+54887&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+54887&report=yes&reason=non-english Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+54887&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+54887&report=yes Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#92134) next »