Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 111011 - dev-lang/php // dev-php/php <= 4.4.0, <= 5.0.5 File-Upload $GLOBALS Overwrite Vulnerability
Summary: dev-lang/php // dev-php/php <= 4.4.0, <= 5.0.5 File-Upload $GLOBALS Overwrite...
Status: RESOLVED DUPLICATE of bug 111032
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All All
: High major (vote)
Assignee: Gentoo Security
Depends on:
Reported: 2005-10-31 06:15 UTC by Vic Fryzel (shellsage) (RETIRED)
Modified: 2005-10-31 13:33 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Vic Fryzel (shellsage) (RETIRED) gentoo-dev 2005-10-31 06:15:08 UTC
$GLOBALS overwrite can lead to unexpected behaviour of PHP applications, which
can lead to execution of remote PHP code in many situations.

Explanation of problem:

See original advisory for public exploit details:

Reproducible: Always
Steps to Reproduce:
Comment 1 Thierry Carrez (RETIRED) gentoo-dev 2005-10-31 13:33:25 UTC
Regrouping issues...

*** This bug has been marked as a duplicate of 111032 ***