Backdoor to the server...
By Pia Heikkila
Published: 1 March 2002 12:25 GMT
Researchers have found a serious vulnerability in server scripting software PHP.
The open source scripting language could let hackers run random code or even crash the server, according to US-based security research laboratory Cert.
Cert said the latest version, PHP4, is vulnerable but also an older version, PHP3 is at risk.
Cert warned: "PHP can be installed on a variety of web servers, including Apache, IIS, Caudium, Netscape and iPlanet, OmniHTTPd and others.
"Vulnerabilities in the php_mime_split function may allow an intruder to execute arbitrary code with the privileges of the web server."
For more information, see
http://security.e-matters.de/advisories/012002.html
Perl Programmer ( Perl, MySQL, Linux, Apache ) A fantastic opportunity has arisen for a Perl Programmer (Software Developer) in London, to join an ...
The role of the Check Team member is to undertake technical health and vulnerability Tests and assist in maintaining CHECK Laboratory. Check Team ...
Check Team Leader Summary: My client are looking for an experienced consultant CHECK Team Leader to join our Information Security Practice.Main ...
Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.
Stories from the web...
Copyright © 2008 CBS Interactive Limited. All rights reserved. Top of page
Digg
Slashdot
Del.icio.us
Stumble
Reddit
RSS Feeds
Bob Tarzey Why you must rein in your power users When they do damage, it can be catastrophic to your business
Jon Collins Is losing a mobile device really such a big deal? How to minimise the damage to your business