Month of PHP Bugs - Day 4

Two more PHP vulnerabilities exposed in Day 4 of the Month of PHP Bugs project raising the bug count to 11:

  1. PHP php_binary Session Deserialization Information Leak Vulnerability Malformed session data in php_binary format might leak a portion of heap data into PHP variables.
  2. PHP WDDX Session Deserialization Information Leak Vulnerability Numerical keys in session data in WDDX format might leak an arbitrary portion of stack data into PHP variables.

Share This

If you enjoyed this post, make sure you subscribe to my RSS feed!



Thank you for reading this post. You can now Leave A Comment (0) or Leave A Trackback.

Post Info

This entry was posted on Monday, March 5th, 2007 and is filed under Month Of PHP Bugs.

You can follow any responses to this entry through the Comments Feed. You can Leave A Comment, or A Trackback.



Previous Post: Oracle Cursor Injection - SET ROLE DBA; Role set. »
Next Post: QuickTime 7.1.5 Update Fixes 7 Critical Vulnerabilities »

Read More

Related Reading:

Latest Posts:


Leave a Reply

Note: Any comments are permitted only because the site owner is letting you post, and any comments will be removed for any reason at the absolute discretion of the site owner.

Close
E-mail It