Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:11366
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
To: internals@lists.php.net
Date: Tue, 20 Jul 2004 01:42:50 -0700
Message-ID: <1090312970.20797.200698630@webmail.messagingengine.com>
Subject: Want to know about security vulnerablity that was fixed in PHP4.3.8
From: kameshj@fastmail.fm ("Kamesh Jayachandran")

Hi All,
I have PHP-4.2.3.
As per http://security.e-matters.de/advisories/112004.html , my PHP is
vulnerable.
I have a overview of the problem.
Can someone answer my questions which make my understanding of the
problem even better?
1)Only code that tries to create/initialize a Non-Persistent hash table
is vulnerable under certain cases.
True or False.
2)How come some remote attacker can set the Destructor to point to the
function of his choice?
3)Where can I get the patch for this vulnerablity for PHP-4.2.3.
4)Can some one point to the executable test case for this problem so
that I can test before and after incorporating the fix?

With regards
Kamesh Jayachandran