Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 111014 - dev-lang/php // dev-php/php <= 4.4.0, <= 5.0.5 register_globals Activation Vulnerability in parse_str()
Summary: dev-lang/php // dev-php/php <= 4.4.0, <= 5.0.5 register_globals Activation Vu...
Status: RESOLVED DUPLICATE of bug 111032
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All All
: High minor (vote)
Assignee: Gentoo Security
Depends on:
Reported: 2005-10-31 06:23 UTC by Vic Fryzel (shellsage) (RETIRED)
Modified: 2005-10-31 13:33 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Vic Fryzel (shellsage) (RETIRED) gentoo-dev 2005-10-31 06:23:38 UTC
When parse_str() is called with only one parameter it parses the supplied
string, as if it were the query string passed via a URL and sets variables in
the global scope. This is achieved by internally switching register_globals on,
while the string is parsed.

For more details see original advisory:

Reproducible: Always
Steps to Reproduce:
Comment 1 Thierry Carrez (RETIRED) gentoo-dev 2005-10-31 13:33:43 UTC
Regrouping issues...

*** This bug has been marked as a duplicate of 111032 ***