Bug 5386 – PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Toni Viemerö 2002-07-22 07:56:51 UTC]

The PHP Group has learned of a serious security vulnerability in PHP versions 
4.2.0 and 4.2.1. An intruder may be able to execute arbitrary code with the 
privileges of the web server. This vulnerability may be exploited to compromise 
the web server and, under certain conditions, to gain privileged access.
The PHP Group has released a new PHP version, 4.2.2, which incorporates a fix 
for the vulnerability.

[Comment 1 Seemant Kulleen (RETIRED) 2002-07-22 08:11:12 UTC]

Ryan, please investigate and patch/fix as appropriate, then drop me an e-mail so
that I can send out a GLSA

[Comment 2 Toni Viemerö 2002-07-22 08:12:48 UTC]

Here's the advisory link: http://security.e-matters.de/advisories/022002.html

[Comment 3 Ryan Phillips (RETIRED) 2002-07-22 13:13:50 UTC]

Appears Aliz committed the update and the security update was sent