MyBB Community Forums

Advisory ID : FrSIRT/ADV-2006-0046
Rated as : Moderate Risk
Note : Affects PHP versions 4.x on Windows

<?php

//Exploit for
// Apache/1.3.33
// PHP/4.4.0
//Windows only

$eip = "71AB5651"; //EIP - CALL ESI from Winsock 2.0 ws2_32.dll v5.1.2600.0
$esi = "10000000"; //ESI - Temporary. The memory under this location will be trashed.

http://www.frsirt.com/exploits/20060105.phpflaw.php

I fail to see what this has to do with us here.

Also.

Quote:Note : Affects PHP versions 4.x on Windows

People should be updating to 5.x now anyway.

its called news, gives people more reason to upgrade to 5

squall_leonhart69r Wrote:gives people more reason to upgrade to 5

As far as I know, PHP 4 is still supported, and bugs are being fixed. I bet version 4.4.2 will be released soon with this bug patched.

WDZ Wrote:I bet version 4.4.2 will be released soon

http://www.php.net/release_4_4_2.php

I'm not sure if this particular bug is fixed, but they did fix a number of things...