[Xitami] PHP vulnerability

[Francis Turner]

Seeing as lots of people using Xitami run PHP I thought the list might 
be interested in this

http://security.e-matters.de/advisories/012002.html

Advisory 01/2002
PHP remote vulnerabilities
 
 
 
*Release Date:* 2002/02/27
*Author:* Stefan Esser [s.esser@ematters.de] <mailto:s.esser@e-matters.de>
*Application:* PHP v3.0.10-v3.0.18, v4.0.1-v4.1.1
*Severity:* Several vulnerabilities in PHP's fileupload code allow 
remote compromise
*Risk:* Critical
*Reference:* http://security.e-matters.de/advisories/012002.html 
<http://security.e-matters.de/advisories/012002.html?SID=a87c7ca04ea241641a0aba3c4d52894f> 

*Last Modified:  * 2002/02/28

 
 
 
 
*Overview*

We found several flaws in the way PHP handles multipart/form-data POST 
requests. Each of the flaws could allow an attacker to execute arbitrary 
code on the victim's system.  
 


-- 
...if the US Government were ever to get really serious about Internet 
security, the top players in Microsoft's management hierarchy would find 
themselves handcuffed, blindfolded, led onto a tarmac within some obscure 
Air Force base, and shot.
-- Thomas C Greene (http://www.theregister.co.uk/content/55/23223.html)