Help - Search - Members - Calendar
Full Version: Php Security And Upgrade!
TotalChoice Hosting Family Forums > TotalChoice Hosting General Support > Security Discussions
Head Guru
Description:
Multiple vulnerabilities have been reported in PHP, where some have an unknown impact and others can be exploited by malicious people to cause a DoS (Denial of Service).

1) Errors within the "php_handle_iff()" and "php_handle_jpeg()" functions called by the "getimagesize()" PHP function can be exploited to cause infinite loops and consume all available CPU resources via a specially crafted image.

This has been reported in versions 4.2.2, 4.3.9, 4.3.10, and 5.0.3. Other versions may also be affected.

2) Multiple unspecified security issues exist in the exif and fbsql extensions and in the "unserialize()" and "swf_definepoly()" PHP functions.

Other bugs have also been reported where some may be security related.

Solution:
Update to version 4.3.11 or 5.0.4.
http://www.php.net/downloads.php

As of this morning all TCH servers have been upgraded to php 4.3.11
TCH-Bruce
thumbup.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.