PECL Alternative PHP Cache Local Denial of Service Vulnerability

Bugtraq ID:	32942
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 19 2008 12:00AM
Updated:	Dec 29 2008 09:42PM
Credit:	Moritz Naumann
Vulnerable:	PECL APC 3.1.1 PECL APC 3.0.19
Not Vulnerable:

PECL Alternative PHP Cache Local Denial of Service Vulnerability

PECL Alternative PHP Cache is prone to a local denial-of-service vulnerability. Specifically, a local user may either fill the cache or repeatedly delete all files from the cache.

Attackers may exploit this issue to prevent proper use of the cache, resulting in a denial-of-service condition.

Alternative PHP Cache 3.1.1 and 3.0.19 are vulnerable; other versions may also be affected.

PECL Alternative PHP Cache Local Denial of Service Vulnerability

This issue may be exploited via commonly available tools.

PECL Alternative PHP Cache Local Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PECL Alternative PHP Cache Local Denial of Service Vulnerability

References:

• Alternative PHP Cache Homepage (PECL)
  
• PHP APC vulnerable to local attacks (Moritz Naumann )