Mailinglist Archive: opensuse-bugs (6147 mails)
| < Previous | Next > |
[Bug 292995] VUL-0: php5 bz2 extension DoS
- From: bugzilla_noreply@xxxxxxxxxx
- Date: Mon, 23 Jul 2007 09:50:05 -0600 (MDT)
- Message-id: <20070723155005.F0731CC95D@xxxxxxxxxxxxxxxxxxxxxx>
https://bugzilla.novell.com/show_bug.cgi?id=292995#c4
--- Comment #4 from Cristian Rodriguez <judas_iscariote@xxxxxxxxxxxxx> 2007-07-23 09:50:05 MST ---
(In reply to comment #3 from Michal Marek)
> I don't see any reference to bz2 in ext/com_dotnet/. Could be a copy-paste
> error in the exploit ;-)
>
I have no clue whatosever how this is supposed to interact with bz2.. exploit
uses no bz2 functions, nor ext/com_dotnet uses bz2 nor the test script uses bz2
output buffering functionality... looks INVALID or at least NOTEXPLOITABLEHERE
;)
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
--- Comment #4 from Cristian Rodriguez <judas_iscariote@xxxxxxxxxxxxx> 2007-07-23 09:50:05 MST ---
(In reply to comment #3 from Michal Marek)
> I don't see any reference to bz2 in ext/com_dotnet/. Could be a copy-paste
> error in the exploit ;-)
>
I have no clue whatosever how this is supposed to interact with bz2.. exploit
uses no bz2 functions, nor ext/com_dotnet uses bz2 nor the test script uses bz2
output buffering functionality... looks INVALID or at least NOTEXPLOITABLEHERE
;)
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
| < Previous | Next > |