Re: exploit for openbsd 3.9 php 4.4.1p0/5.0.5p0

2006-05-03 Thread paul dansing
php is required in order to use many of the more mature web applications such as forum software. i run apache chroot, use modsecurity, and use ipf to limit the www user. a tight systrace policy might help but not very much incremental gain. everyone says php is a security breach waiting to

is openbsd 3.9 php vulnerable? (Re[2]: [UPDATE] php5 to version 5.1.2 (IMPORTANT))

2006-05-02 Thread paul dansing
Hello, Can someone please give a straight answer about these PHP security holes? OpenBSD 3.9 released yesterday had packages supporting: php 4.4.1p0 php 5.0.5p0 are either of these vulnerable? if so, is someone going to release updated packages (not just ports)? the php 5.1.3 release: The

exploit for openbsd 3.9 php 4.4.1p0/5.0.5p0

2006-05-02 Thread paul dansing
Is there some reason this issue is being ignored? What, you people need to see an exploit before you will even LOOK at it and answer whether it is vuln? Can someone please give a straight answer about these PHP security holes? OpenBSD 3.9 released yesterday had packages supporting: php

Re: CanSecWest/core06 Vancouver April 3-7

2006-03-19 Thread paul dansing
This conference currently costs $1546 USD! :-( what moneybags loser is going to pay up so much just to go to a conference? buy yourself a nice computer, or hell, donate the money to openbsd.org instead! :-D drop a zero or two and it would be worth the trip Tuesday, March 7, 2006, 8:45:30 PM,

Re: The Apache Question (lighttp remote holes just fixed)

2006-02-07 Thread paul dansing
lighttpd just fixed a remote hole (case insensitive file systems) in the CURRENT VERSION! Does this inspire confidence? I mean for fck sake, the version just before they fixed %00 append bug! Next thing they will discover directory traversal. o_O YEAH, yeah I want this FINE PIECE OF SOFTWARE

Re: httpd question - solved (ProutDNS)

2006-02-07 Thread paul dansing
Hello Frank, here ya go buddy: http://www.prout.be/ProutDNS/ http://www.prout.be/ProutDNS/download/ProutDNS-0.6.2.tar.gz Tuesday, February 7, 2006, 10:54:33 AM, you wrote: At 04:17 AM 2/6/06, Alexander Farber wrote: And there is also ipcheck.py On 2/6/06, Keith Richardson [EMAIL PROTECTED]