[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] PHP: Calendar Buffer Overflow
- To: Martin Pitt <martin.pitt@xxxxxxxxxxxxx>
- Subject: Re: [Full-disclosure] PHP: Calendar Buffer Overflow
- From: Stefan Esser <sesser@xxxxxxx>
- Date: Tue, 28 Jun 2005 13:05:57 +0200
Martin Pitt wrote:
Of course that is a bug that should be fixed in CVS head, but I think
it's not exploitable, so it does not require a security update as far
as I can see.
This bug was fixed in the PHP CVS 16 month ago for the PHP 5 branch, but
was not commited to the PHP 4_3 branch until 2 month ago. This means the
fix will be in the upcoming PHP 4.4.
Greets,
Stefan Esser
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/