info
discussion
exploit
solution
references
PHP MySQLI Error Logging Remote Format String Vulnerability
Solution:
The vendor has released PHP version 5.1.2 to address this, and other issues:
PHP PHP 5.1
PHP php-5.1.2.tar.bz2
http://www.php.net/get/php-5.1.2.tar.bz2/from/a/mirror
PHP PHP 5.1.1
PHP php-5.1.2.tar.bz2
http://www.php.net/get/php-5.1.2.tar.bz2/from/a/mirror
Privacy Statement
Copyright 2010, SecurityFocus