« March 2007, The Month of PHP Bugs | Main | Armorize CodeSecure, On-Demand PHP Source Code Analysis »

Will PHP Be More Secure On March 2007 ?

mopb-logo.png
Month of PHP Bugs already started, and there is until today 11 Bugs posted. The goal is to make PHP more secure and make people and developers aware of insecurities in the language. Day by day vulnerabilities vulnerabilities in the Zend Engine, the PHP core and the PHP extensions will be disclosed, and I think that Stefan have the list ready to go for the full month, maybe more.
  1. PHP 4 Userland ZVAL Reference Counter Overflow Vulnerability
  2. PHP Executor Deep Recursion Stack Overflow
  3. PHP Variable Destructor Deep Recursion Stack Overflow
  4. PHP 4 unserialize() ZVAL Reference Counter Overflow
  5. PHP unserialize() 64 bit Array Creation Denial of Service Vulnerability
  6. Zend Platform Insecure File Permission Local Root Vulnerability
  7. Zend Platform ini_modifier Local Root Vulnerability
  8. PHP 4 phpinfo() XSS Vulnerability (Deja-vu)
  9. PHP wddx_deserialize() String Append Buffer Overflow Vulnerability
  10. PHP php_binary Session Deserialization Information Leak Vulnerability
  11. PHP WDDX Session Deserialization Information Leak Vulnerability

Posted by Hatem on March 5, 2007 3:10 PM to Alert | Experience | | View blog reactions

Bookmark this article at these sites
Post a comment





(Email will remain hidden)





Please enter the security code you see here




Related entries
Email to a friend
Email this article to:


Your email address:


Message (optional):