oss-sec mailing list archives

Stefan Esser's 0day PHP SysCan flaw

From: Josh Bressers <bressers () redhat com>
Date: Fri, 18 Jun 2010 09:14:08 -0400 (EDT)

Hello all,

I just assigned CVE-2010-2225 to Stefan Esser's 0day PHP unserialize flaw.

He speaks of it on his twitter page:
http://twitter.com/i0n1c/status/16447867829

Our bug is here:
https://bugzilla.redhat.com/show_bug.cgi?id=605641

We'll update it as we learn more.

Thanks.

-- 
    JB

Current thread:

Stefan Esser's 0day PHP SysCan flaw Josh Bressers (Jun 18)
- Re: Stefan Esser's 0day PHP SysCan flaw Raphael Geissert (Jun 27)
  - Re: Stefan Esser's 0day PHP SysCan flaw Raphael Geissert (Jun 30)
    - Re: Re: Stefan Esser's 0day PHP SysCan flaw Pierre Joye (Jun 30)