oss-sec mailing list archives

Re: CVE Request - php (PHP BZ#27421)


From: "Steven M. Christey" <coley () linus mitre org>
Date: Tue, 3 Feb 2009 16:13:44 -0500 (EST)


On Fri, 30 Jan 2009, Jan Lieskovsky wrote:

  this PHP issue looks to desire a new CVE id.

References:
http://bugs.php.net/bug.php?id=27421
https://bugzilla.redhat.com/show_bug.cgi?id=479272


What attack scenario exists for this issue?  One virtual-host user can
effectively DoS other virtual hosts running on the same Apache instance?

- Steve


Current thread: