You are here: silicon.com > Software > Security Strategy

Security Strategy

Cert unveils serious PHP hole

Backdoor to the server...

By Pia Heikkila

Published: 1 March 2002 12:25 GMT

Researchers have found a serious vulnerability in server scripting software PHP.

The open source scripting language could let hackers run random code or even crash the server, according to US-based security research laboratory Cert.

Cert said the latest version, PHP4, is vulnerable but also an older version, PHP3 is at risk.

Cert warned: "PHP can be installed on a variety of web servers, including Apache, IIS, Caudium, Netscape and iPlanet, OmniHTTPd and others.

"Vulnerabilities in the php_mime_split function may allow an intruder to execute arbitrary code with the privileges of the web server."

For more information, see
http://security.e-matters.de/advisories/012002.html

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

  • Jobs
Senior Systems Administrator (Linux, RedHat, Amazon EC2, Apache)

Senior Systems Administrator (Linux, RedHat, Amazon EC2, Apache) Senior systems administrator with a strong technical background in Linux, required ...

Perl Developer ( Perl, MySQL, Linux, Apache ) - London

Perl Programmer ( Perl, MySQL, Linux, Apache ) A fantastic opportunity has arisen for a Perl Programmer (Software Developer) in London, to join an ...

JAVA Programmer JSP,Java,Tomcat,Eclipse, Linux, Apache,Sql

JAVA Programmer JSP,Java,Tomcat,Eclipse, Linux, Apache,Sql Our client a leading media agency based in the heart of the westend are currently looking ...

Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.





Quick Sitemap Links: