Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

php-toolkit: denial of service

Package(s):

php-toolkit

CVE #(s):

CVE-2008-1734

Created:

April 18, 2008

Updated:

April 23, 2008

Description:

From the Gentoo advisory: Toni Arnold, David Sveningsson, Michal Bartoszkiewicz, and Joseph reported that php-select does not quote parameters passed to the "tr" command, which could convert the "-D PHP5" argument in the "APACHE2_OPTS" setting in the file /etc/conf.d/apache2 to lower case.

Alerts:

Gentoo

200804-19

2008-04-17

(Log in to post comments)