PHP 4.1.2 for Win32 - File Upload Exploit
| From: | Fabio De Martin | Date: | Mon, 04 Mar 2002 14:36:11 +0000 |
| Subject: | PHP 4.1.2 for Win32 - File Upload Exploit | ||
| Groups: | php.windows | ||
| Request: | Send a blank email to php-windows+get-12438@lists.php.net to get a copy of this message | ||
Where can I find a documentation about the PHP exploit regarding file
uploads that excludes the WIN32 version from this problem?
On e-matters security advisory
(http://security.e-matters.de/advisories/012002.html), this information is
not clear and what I can understand is that all servers running PHP are
vulnerable without the patch.
But on PHP.NET website we can only find the patch for Linux!!!
Please, I need an official report from PHP.net about this issue because my
ASP just disabled the file_uploads INI set while the patch for Win32 is
released.
Regards,
--
Fabio De Martin
BASE64 Soluções em Tecnologia
Telefone: 011.5507.2426
Celular: 011.9639.8990
The information in this e-mail and any attachments is confidential and is
intended for the addressee only. If you are not the intended recipient,
please delete this message and any attachments and advise the sender by
return e-mail.
Visit our website: http://www.base64.com.br