Inicio

PHP: bug fins la versio 4.0.2

Avui llegint les noticies de securityfocus he vist q s’ha trobat un bug al
php fins la versió 4.0.2, la 4.0.3 ja ho té resolt. De fet, si
llegim d’on ve el bug aquest és obvi, ja que aprofita una funció
del PHP q permet usar el syslog així doncs si tenim en compte q
gairebé tots els dimonis dels unix estan afectats pel errors dels string
l’únic q es tracta és d’aprofitar aixó per tal d’obtenir
execusió arbitraria de codi, o root remot.

La explicació tècnica de securityfocus és la
següent:
The vulnerability exists in the code that handles error logging and is present
if error logging is enabled in the “php.ini” configuration file. When errors
are encountered by PHP, a string containing data supplied by the user is passed
as the format string argument (the log_message variable) to the php_syslog()
function (which contains *printf functions). As a result, it is possible for a
malicious user to craft a string containing malicious format specifiers that
will be passed to the php_syslog function as part of an error message. When
interpreted by the *printf functions, these specifiers can cause the process to
overwrite its own stack variables with arbitrary data. This can lead to remote
access being gained on the target host with privileges of the webserver for the
attacker.
Error logging may or may not be enabled by default on systems shipped with
PHP.

Per tal d’evitar aquest error es pot deshabilitar al php.ini la
opció:
“log_errors = Off”
O instal.lar-se el PHP 4.0.3 q va sortir ahir.
Per més informació sobre el tema:
http://www.securityfocus.com/bid/1786

Prometheus – Llibreria de PHP

http://prometheus.zerodivide.net/api/
Mirant les novetats de freshmeat he vist aquesta llibreria de PHP q incorpora
un munt de noves classes d’objectes al PHP, esta molt currat i te moltes
cosetes, en propers dies incloure comentaris més concrets sobre el q
té.

Llistat de clases q incorpora la llibreria:
AutoLoad – The ability to load just the classes you need and the classes
dependencies. I.e. i want to use the mail object, and nothing else AutoLoad(
‘Mail’ );.
Sessions – Allows storage of variables, across pages by keeping state in a
database. Database Independence – There is a framework for a database
independence layer (Mysql, Oracle, and Postgres are supported).
BenchMarking – A object for benchmarking code segments. UserAuth – An
authentication class that takes plugable backend drivers. I.e. i would like to
auth this part of the site off of un*x password files.
UserDomain – A virtual “domain” for the users within a website. This provides a
abitrary way to group users.
WebClient – Identifies webbrowser capabilities, and features.
Unix Utilities – The ability to read unix password files.
FileSize – Get the file size for a file and format it with the proper
conversions (i.e. 1024 = 1k ).
PageNavigator – A utility object that allows you to create multiple page
navigation based upon the concept of displaying x of n items on each
page.
UrlObject – A utility for creating urls MimeObject – Contains mime mappings,
and is a able to figure out mime mappings for most files. Mail – The ability to
read and send mail, via IMAP and local sendmail. In the future there will be
SMTP and POP3 support also.
AppServer – A series of objects to help enable php into a app server style
environment.
Templates – The ability to parse templates, both with and without php,
automatic interpolation of files.