PHP 'strrchr()' Function Information Disclosure Vulnerability
BID:41265
Info
PHP 'strrchr()' Function Information Disclosure Vulnerability
| Bugtraq ID: | 41265 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 30 2010 12:00AM |
| Updated: | Jun 30 2010 12:00AM |
| Credit: | Peter Veres (DrMcKay) |
| Vulnerable: |
PHP PHP 5.3.2 PHP PHP 5.3.1 PHP PHP 5.3 PHP PHP 5.2.13 PHP PHP 5.2.12 PHP PHP 5.2.11 PHP PHP 5.2.10 PHP PHP 5.2.9 -2 PHP PHP 5.2.9 PHP PHP 5.2.8 PHP PHP 5.2.7 PHP PHP 5.2.6 PHP PHP 5.2.5 PHP PHP 5.2.4 PHP PHP 5.2.3 PHP PHP 5.2.2 PHP PHP 5.2.1 PHP PHP 5.1.6 PHP PHP 5.1.5 PHP PHP 5.1.4 PHP PHP 5.1.3 -RC1 PHP PHP 5.1.3 PHP PHP 5.1.2 PHP PHP 5.1.1 PHP PHP 5.1 PHP PHP 5.0.5 PHP PHP 5.0.4 PHP PHP 5.0.3 PHP PHP 5.0.2 PHP PHP 5.0.1 PHP PHP 5.0 .0 PHP PHP 5.2 |
| Not Vulnerable: | |
Discussion
PHP 'strrchr()' Function Information Disclosure Vulnerability
PHP is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
PHP is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
Exploit / POC
PHP 'strrchr()' Function Information Disclosure Vulnerability
Currently we are not aware of any working exploits If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
PHP 'strrchr()' Function Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
PHP 'strrchr()' Function Information Disclosure Vulnerability
References:
References:
- CVE Request -- PHP strrchr() Interruption Information Leak Vulnerability (Peter Veres (DrMcKay))
- PHP Homepage (PHP)