Re: [PHP] Did everybody see the security warning at php.net?

2002-02-28 Thread Bo Kleve
Is this vulnerability exploitable only if I have an upload page or is it also possible to use it other ways? From reading the pages I have found I guess it's only the first way, but I want to be sure. /BoK http://www.php.net/ [27-Feb-2002] Due to a security issue found in all versions of PHP

[PHP] Did everybody see the security warning at php.net?

2002-02-27 Thread Robert V. Zwink
http://www.php.net/ [27-Feb-2002] Due to a security issue found in all versions of PHP (including 3.x and 4.x), a new version of PHP has been released. Details about the security issue are available here. All users of PHP are strongly encouraged to either upgrade to PHP 4.1.2, or install the