cPanel mod_php suEXEC Taint Vulnerability

SEVERITY: High, Arbitrary Execution as Arbitrary User PROBLEM DESCRIPTION: Flaws in how Apache's suexec binary has been patched by cPanel when configured for modphp, in conjuction with cPanel's creation of some perl scripts that are not taint clean, allow for any user to execute arbitrary code as...

Apache mod_php and mod_perl file decriptor leak

Descriptor leakage allowws to spoof https session in child process...

CVE-2003-1307

The modphp module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: th...

Hijacking Apache https by mod_php

Product: PHP - modphp Versions: 4.2.x, 4.3.x / apache 2.0.x URL: http://www.php.net Impact: Daemon Hijacking Bug class: Leaked Descriptor Vendor notified: Yes Fix available: No Date: 12/26/03 Issue: ====== Modphp under apache 2.0.x leaks a critical file descriptor that can be used to takeover...

Apache 2.0.4x mod_php - File Descriptor Leakage (1)

Apache 2.0.4x modphp - File Descriptor Leakage 1 // source: https://www.securityfocus.com/bid/9302/info Reportedly, the Apache modphp module may be prone to a vulnerability that may allow a local attacker to gain access to privileged file descriptors. As a result, the attacker may pose as a...

Apache 2.0.4x mod_php - File Descriptor Leakage (1)

// source: https://www.securityfocus.com/bid/9302/info Reportedly, the Apache modphp module may be prone to a vulnerability that may allow a local attacker to gain access to privileged file descriptors. As a result, the attacker may pose as a legitimate server and possibly steal or manipulate...

mod_php update fixes security problems

A new modphp PHP4 package is available to fix security problems. Here's the information from the Slackware 8.0 ChangeLog: ---------------------------- Sat Mar 2 22:45:25 PST 2002 patches/packages/modphp.tgz: Upgraded to PHP 4.1.2. This fixes several security problems in the POST handling code use...

FreeBSD-SA-00:75.php

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:75 Security Advisory FreeBSD, Inc. Topic: modphp3/modphp4 allows remote code execution Category: ports Module: modphp3/modphp4 Announced: 2000-11-20 Credits: Jouko...