PHP security hole

Affects version 4.2.0 and 4.2.1

[mavherick]

Scripting flaw threatens Web servers [news.com.com]

See php.net [php.net] for updates.

[ergophobe]

Thanks for posting that news. It sounds like so far the "good guys" have caught PHP security problems before the bad guys, but it's just a matter of time....

Tom

[Marcia]

Some of the vendor information is here:

[cert.org...]

[EliteWeb]

Its always the good guys who find it first, depends who you think is good and bad. ;) unless the developers cought it first you know that people were having fun with it for a while. 0day warez ;)