Webmasters Urged To Plug PHP Security Hole

According to an article by Stefan Esser of Germany-based E-matters, developers who use PHP on their websites are being urged today to upgrade to a new release that does not contain recently discovered - and apparently serious - security holes. Esser reported that a number of memory-allocation bugs were found in PHP code that handles file uploads, also known as multipart/form-data Post requests.

According to Esser, who is also part of the Open-Source PHP development team, versions of PHP 4 for Linux and Solaris prior to a new bug-fix 4.1.2 release contain related vulnerabilities that could allow a hacker to gain control of servers running the software. Some releases of PHP 3 exhibit similar security problems, including an incarnation of one bug that extends beyond Linux and Solaris to most platforms on which PHP is run. For more information, follow the link below.

Webmasters Urged To Plug PHP Security Hole

• Subscribe
• RSS

• Editorial
• Specials
• Community
• News
• Tech and Tags
• Views
• Reviews
• Techniques
• Security
• Best of ColdFusion Talk
• Knowledge Base
• Blog Watch

• Tipical Charlie