Bug 111011

Summary:	dev-lang/php // dev-php/php <= 4.4.0, <= 5.0.5 File-Upload $GLOBALS Overwrite Vulnerability
Product:	Gentoo Security	Reporter:	Vic Fryzel (shellsage) (RETIRED) <shellsage>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	major
Priority:	High
Version:	unspecified
Hardware:	All
OS:	All
URL:	http://www.hardened-php.net/advisory_202005.79.html
Whiteboard:
Package list:		Runtime testing required:	---

Description Vic Fryzel (shellsage) (RETIRED) gentoo-dev

2005-10-31 06:15:08 UTC

$GLOBALS overwrite can lead to unexpected behaviour of PHP applications, which
can lead to execution of remote PHP code in many situations.

Explanation of problem:
http://www.hardened-php.net/globals-problem

See original advisory for public exploit details:
http://www.hardened-php.net/advisory_202005.79.html

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Comment 1 Thierry Carrez (RETIRED) gentoo-dev

2005-10-31 13:33:25 UTC

Regrouping issues...

*** This bug has been marked as a duplicate of 111032 ***