|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: function sleep() in all versions of PHP
cxib
securityreason.com
Date: Tue May 27 2008 - 05:44:00 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Yeap.
„Using PHP as an in-process script interpreter grants script authors control over the httpd children.”
It is possible to make DoS (block all sockets/memory exe.). (more in Xploit magazin)
Reason: Use PHP via a CGI interpreter with RLimit* directives.
Anyone how use PHP as an in-process script interpreter, can be dangerous.
Best Regards,
Maksymilian Arciemowicz
securityreason.com
http://securityreason.com/key/Arciemowicz.Maksymilian.gpg
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]