ID: 27051
Comment by: jfjauvin at gmail dot com
Reported By: ghoffer at globalscape dot com
Status: No Feedback
Bug Type: CGI related
Operating System: Windows
PHP Version: 5.3
Assigned To: pajoye
New Comment:
This bug seems to be still there, no update for a while. From my
Process Monitor logs, there is no apparent permission errors. It looks
like cmd.exe is not event launched.
PHP 5.3.1
MSVC9
FastCGI
Microsoft-IIS/7.0
PHP Warning: exec() [<a href='function.exec'>function.exec</a>]:
Unable to fork ['cmd /c echo Hello World!] in
D:\Inetpub\wwwroot\www.example.com\test.php on line 3
"Sequence","Time of Day","Process
Name","PID","Operation","Path","Result","Detail"
"n/a","12:04:43.1093656
PM","w3wp.exe","4064","CreateFile","D:\Inetpub\wwwroot\www.example.com\test.php\web.config","PATH
NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options:
Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode:
Read, AllocationSize: n/a, Impersonating: DOMAIN\www.example.com"
"n/a","12:04:43.1095972
PM","w3wp.exe","4064","CreateFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","Desired
Access: Generic Read, Disposition: Open, Options: Sequential Access, No
Buffering, Attributes: RE, ShareMode: Read, Write, Delete,
AllocationSize: n/a, Impersonating: DOMAIN\www.example.com, OpenResult:
Opened"
"n/a","12:04:43.1097796
PM","w3wp.exe","4064","QueryAllInformationFile","D:\Inetpub\wwwroot\www.example.com\test.php","BUFFER
OVERFLOW","CreationTime: 7/10/2009 11:29:33 AM, LastAccessTime:
7/10/2009 11:29:33 AM, LastWriteTime: 2/2/2010 12:04:35 PM, ChangeTime:
2/2/2010 12:04:35 PM, FileAttributes: A, AllocationSize: 4,096,
EndOfFile: 43, NumberOfLinks: 1, DeletePending: False, Directory: False,
IndexNumber: 0x100000000416b, EaSize: 0, Access: Generic Read, Position:
0, Mode: Sequential Access, No Buffering, AlignmentRequirement: Word"
"n/a","12:04:43.1102377
PM","php-cgi.exe","2760","CreateFile","D:\Inetpub\wwwroot\www.example.com","SUCCESS","Desired
Access: Read Data/List Directory, Synchronize, Disposition: Open,
Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating:
DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1102797
PM","php-cgi.exe","2760","QueryDirectory","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","Filter:
test.php, 1: test.php"
"n/a","12:04:43.1103154
PM","php-cgi.exe","2760","CloseFile","D:\Inetpub\wwwroot\www.example.com","SUCCESS",""
"n/a","12:04:43.1104406
PM","php-cgi.exe","2760","CreateFile","D:\Inetpub\wwwroot","SUCCESS","Desired
Access: Read Data/List Directory, Synchronize, Disposition: Open,
Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating:
DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1104738
PM","php-cgi.exe","2760","QueryDirectory","D:\Inetpub\wwwroot\www.example.com","SUCCESS","Filter:
www.example.com, 1: www.example.com"
"n/a","12:04:43.1105034
PM","php-cgi.exe","2760","CloseFile","D:\Inetpub\wwwroot","SUCCESS",""
"n/a","12:04:43.1106205
PM","php-cgi.exe","2760","CreateFile","D:\Inetpub","SUCCESS","Desired
Access: Read Data/List Directory, Synchronize, Disposition: Open,
Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating:
DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1106537
PM","php-cgi.exe","2760","QueryDirectory","D:\Inetpub\wwwroot","SUCCESS","Filter:
wwwroot, 1: wwwroot"
"n/a","12:04:43.1106805
PM","php-cgi.exe","2760","CloseFile","D:\Inetpub","SUCCESS",""
"n/a","12:04:43.1107412
PM","php-cgi.exe","2760","CreateFile","D:\","SUCCESS","Desired Access:
Read Data/List Directory, Synchronize, Disposition: Open, Options:
Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read,
Write, Delete, AllocationSize: n/a, Impersonating:
DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1107733
PM","php-cgi.exe","2760","QueryDirectory","D:\Inetpub","SUCCESS","Filter:
Inetpub, 1: Inetpub"
"n/a","12:04:43.1108023
PM","php-cgi.exe","2760","CloseFile","D:\","SUCCESS",""
"n/a","12:04:43.1111529
PM","php-cgi.exe","2760","CreateFile","D:\Inetpub\wwwroot\www.example.com","SUCCESS","Desired
Access: Read Data/List Directory, Synchronize, Disposition: Open,
Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating:
DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1112066
PM","php-cgi.exe","2760","QueryDirectory","D:\Inetpub\wwwroot\www.example.com\.user.ini","NO
SUCH FILE","Filter: .user.ini"
"n/a","12:04:43.1112443
PM","php-cgi.exe","2760","CloseFile","D:\Inetpub\wwwroot\www.example.com","SUCCESS",""
"n/a","12:04:43.1117452
PM","php-cgi.exe","2760","CreateFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","Desired
Access: Generic Read, Disposition: Open, Options: Synchronous IO
Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write,
AllocationSize: n/a, Impersonating: DOMAIN\www.example.com, OpenResult:
Opened"
"n/a","12:04:43.1118254
PM","php-cgi.exe","2760","ReadFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","Offset:
0, Length: 43, Priority: Normal"
"n/a","12:04:43.1118720
PM","php-cgi.exe","2760","ReadFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","Offset:
0, Length: 43, I/O Flags: Non-cached, Paging I/O, Synchronous Paging
I/O, Priority: Normal"
"n/a","12:04:43.1122877
PM","php-cgi.exe","2760","QueryOpen","D:\Inetpub\wwwroot\www.example.com","SUCCESS","CreationTime:
7/10/2009 11:29:33 AM, LastAccessTime: 2/2/2010 9:52:00 AM,
LastWriteTime: 2/2/2010 9:52:00 AM, ChangeTime: 2/2/2010 9:52:00 AM,
AllocationSize: 4,096, EndOfFile: 4,096, FileAttributes: D"
"n/a","12:04:43.1123637
PM","php-cgi.exe","2760","QueryInformationVolume","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","VolumeCreationTime:
7/10/2009 12:05:39 PM, VolumeSerialNumber: 24A7-59D9, SupportsObjects:
True, VolumeLabel: "
"n/a","12:04:43.1123930
PM","php-cgi.exe","2760","QueryAllInformationFile","D:\Inetpub\wwwroot\www.example.com\test.php","BUFFER
OVERFLOW","CreationTime: 7/10/2009 11:29:33 AM, LastAccessTime:
7/10/2009 11:29:33 AM, LastWriteTime: 2/2/2010 12:04:35 PM, ChangeTime:
2/2/2010 12:04:35 PM, FileAttributes: A, AllocationSize: 4,096,
EndOfFile: 43, NumberOfLinks: 1, DeletePending: False, Directory: False,
IndexNumber: 0x100000000416b, EaSize: 0, Access: Generic Read, Position:
0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"n/a","12:04:43.1124319
PM","php-cgi.exe","2760","ReadFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","Offset:
0, Length: 43"
"n/a","12:04:43.1125218
PM","php-cgi.exe","2760","CloseFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS",""
"n/a","12:04:43.1128956
PM","php-cgi.exe","2760","QueryOpen","D:\Inetpub\wwwroot\www.example.com","SUCCESS","CreationTime:
7/10/2009 11:29:33 AM, LastAccessTime: 2/2/2010 9:52:00 AM,
LastWriteTime: 2/2/2010 9:52:00 AM, ChangeTime: 2/2/2010 9:52:00 AM,
AllocationSize: 4,096, EndOfFile: 4,096, FileAttributes: D"
"n/a","12:04:43.1131742
PM","php-cgi.exe","2760","QueryOpen","D:\PHP5\cmd.exe","NAME NOT
FOUND",""
"n/a","12:04:43.1134247
PM","php-cgi.exe","2760","QueryOpen","D:\PHP5\cmd.exe","NAME NOT
FOUND",""
"n/a","12:04:43.1137195
PM","php-cgi.exe","2760","QueryOpen","C:\Windows\System32\cmd.exe","FAST
IO DISALLOWED",""
"n/a","12:04:43.1139779
PM","php-cgi.exe","2760","CreateFile","C:\Windows\System32\cmd.exe","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
Impersonating: DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1140326
PM","php-cgi.exe","2760","QueryBasicInformationFile","C:\Windows\System32\cmd.exe","SUCCESS","CreationTime:
1/19/2008 12:34:23 AM, LastAccessTime: 1/19/2008 12:34:23 AM,
LastWriteTime: 1/19/2008 2:33:04 AM, ChangeTime: 2/2/2010 11:43:33 AM,
FileAttributes: A"
"n/a","12:04:43.1140530
PM","php-cgi.exe","2760","CloseFile","C:\Windows\System32\cmd.exe","SUCCESS",""
"n/a","12:04:43.1143525
PM","php-cgi.exe","2760","QueryOpen","C:\Windows\System32\cmd.exe","FAST
IO DISALLOWED",""
"n/a","12:04:43.1146062
PM","php-cgi.exe","2760","CreateFile","C:\Windows\System32\cmd.exe","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
Impersonating: DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1146850
PM","php-cgi.exe","2760","QueryBasicInformationFile","C:\Windows\System32\cmd.exe","SUCCESS","CreationTime:
1/19/2008 12:34:23 AM, LastAccessTime: 1/19/2008 12:34:23 AM,
LastWriteTime: 1/19/2008 2:33:04 AM, ChangeTime: 2/2/2010 11:43:33 AM,
FileAttributes: A"
"n/a","12:04:43.1147056
PM","php-cgi.exe","2760","CloseFile","C:\Windows\System32\cmd.exe","SUCCESS",""
"n/a","12:04:43.1150613
PM","php-cgi.exe","2760","CreateFile","C:\Windows\System32\cmd.exe","SUCCESS","Desired
Access: Read Data/List Directory, Execute/Traverse, Read Attributes,
Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
AllocationSize: n/a, Impersonating: DOMAIN\www.example.com, OpenResult:
Opened"
"n/a","12:04:43.1151266
PM","php-cgi.exe","2760","CreateFileMapping","C:\Windows\System32\cmd.exe","FILE
LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection,
PageProtection: PAGE_EXECUTE"
"n/a","12:04:43.1151895
PM","php-cgi.exe","2760","CreateFileMapping","C:\Windows\System32\cmd.exe","SUCCESS","SyncType:
SyncTypeOther"
"n/a","12:04:43.1152680
PM","php-cgi.exe","2760","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Image File Execution Options\cmd.exe","NAME NOT
FOUND","Desired Access: Query Value, Enumerate Sub Keys"
"n/a","12:04:43.1153714
PM","php-cgi.exe","2760","CloseFile","C:\Windows\System32\cmd.exe","SUCCESS",""
"n/a","12:04:43.1155641
PM","php-cgi.exe","2760","CreateFile","D:\","SUCCESS","Desired Access:
Read Data/List Directory, Synchronize, Disposition: Open, Options:
Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read,
Write, Delete, AllocationSize: n/a, Impersonating:
DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1156289
PM","php-cgi.exe","2760","QueryDirectory","D:\PHP5","SUCCESS","Filter:
PHP5, 1: PHP5"
"n/a","12:04:43.1157083
PM","php-cgi.exe","2760","CloseFile","D:\","SUCCESS",""
"n/a","12:04:43.1158982
PM","php-cgi.exe","2760","QueryOpen","D:\PHP5","SUCCESS","CreationTime:
1/4/2010 12:15:47 PM, LastAccessTime: 2/2/2010 11:42:26 AM,
LastWriteTime: 2/2/2010 11:42:26 AM, ChangeTime: 2/2/2010 11:42:26 AM,
AllocationSize: 12,288, EndOfFile: 12,288, FileAttributes: D"
"n/a","12:04:43.1163648
PM","w3wp.exe","4064","CloseFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS",""
Previous Comments:
------------------------------------------------------------------------
[2009-11-20 00:52:51] louis at steelbytes dot com
appears to be still broken in 5.3.1
------------------------------------------------------------------------
[2009-09-30 01:00:01] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
------------------------------------------------------------------------
[2009-09-22 20:11:10] paj...@php.net
Please tell me how you setup FCGI, I did test it under FCGI with
impersonate set and the cmd are actually called using the impersonated
user.
Can you try again using a recent snapshot to be sure that we use the
same bins?
------------------------------------------------------------------------
[2009-09-22 20:04:57] paj...@php.net
Stupid auto no feedback.
------------------------------------------------------------------------
[2009-09-16 01:00:01] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/27051
--
Edit this bug report at http://bugs.php.net/?id=27051&edit=1
