Re: [campsite-support] security bulletins - Newscoop Support Discussions on Sourcefabric Forum

import

Yes, it has. These exploits are only possible with register_globals=on,
which is deprecated, it is a very bad option and will be completely removed
in PHP 6.0. So in PHP 6.0 you won't be able to make your campsite
exploitable even if you want to.

See also the manual install documentation, which explicitly warns you to set
the register_globals off:
http://code.campware.org/manuals/campsite/3.3/index.php?id=200

"Always turn off register_globals because it's a big security hole:
*register_globals = Off"*

Mugur

On Sun, Jul 26, 2009 at 3:00 PM, wrote:

> Author: pippa
> Link: http://code.campware.org/phorum/read.php?8,7313,7313#msg-7313
>
> --------------------------------------------------------------------------------
>
> Hi,
>
> has this been seen to?
>
> http://www.vupen.com/english/advisories/2009/1650
> http://www.securityfocus.com/bid/35456/info
>
> Cheers,
>
> Pippa
>
> --
> Sent from Campware Forums
> http://code.campware.org/phorum
>

Howdy, Stranger!

Categories

Poll

Top Posters