Re: [Savannah-hackers] PHP3 vulnerability

[Jaime E . Villate]

On Thu, Feb 28, 2002 at 09:47:13AM +0100, Loic Dachary wrote:
> Mark H. Weaver writes:
>  >    
>  >    PHP 3.10-3.18
>  >    
>  >       - broken boundary check    (hard to exploit)
>  >       - arbitrary heap overflow  (easy exploitable)
>  >    
> 
>       This is us. I'm running a dist-upgrade on savannah + apply the
> fix + re-install from sources. Thanks a lot for the warning.
Hi,
If I understood the security advisory correctly, we were not in danger because
we do not use web forms for file uploads. But it is good that you have
upgraded to the new version anyway.

Cheers,
Jaime