SecurityFocus

Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data Mar 29 2006 03:22AM
Jasper Bryant-Greene (jasper album co nz) (3 replies)

Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data Apr 03 2006 02:06PM
Moriyoshi Koizumi (moriyoshi at wakwak com) (1 replies)

Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data Apr 03 2006 09:58PM
Jasper Bryant-Greene (jasper album co nz)

Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data Mar 29 2006 04:43PM
Jeff Rosowski (rosowskij ie ymp gov) (1 replies)

Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data Apr 04 2006 01:29PM
John Bond (john r bond gmail com)

On 3/29/06, Jeff Rosowski <rosowskij (at) ie.ymp (dot) gov [email concealed]> wrote:

> It also doesn't affect all versions of PHP. on 5.0.5, it returns \0
> followed by however many Ss you put after it. And your right you wouldn't
> trust user imput like that.
>
> _______________________________________________

I get this behaviour on php v5.0.4 on windows box

[ reply ]

Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data Mar 29 2006 05:19AM
Tõnu Samuel (tonu jes ee)