ID: 14909 Updated by: georg Reported By: [EMAIL PROTECTED] Old Status: Open Status: Bogus Bug Type: Apache related Operating System: Windows PHP Version: 4.1.1 New Comment:
Unbelievable, why do you set your cgi-binary in the document root tree!? See http://www.cert.org/advisories/CA-1996-11.html Previous Comments: ------------------------------------------------------------------------ [2002-01-07 09:34:04] [EMAIL PROTECTED] Well you should have already heard about this but I'll report it anyway becoz we all need a fix very fast! Well when you do this: http://www.example.com/php/php.exe?c:\winnt\repair\sam (this is an example, you can view any file) it will return the files contents! This happens with ANY windows versions...i don't think it affects linux. Also this will return the install path of PHP: http://www.example.com/php/php4ts.dll could you please get a path/new vesion out ASAP! This is extremly serious! ------------------------------------------------------------------------ Edit this bug report at http://bugs.php.net/?id=14909&edit=1 -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
