blob: d5e93ff7cb4ef9dce64da8973ac17b6b0c822269 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] Fwd: Re: [Kolab-devel] Supercolliding a PHP array - DoS Attacks
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Fwd%3A%20Re%3A%20%5BKolab-devel%5D%20Supercolliding%20a%20PHP%20array%20-%0A%09DoS%20Attacks&In-Reply-To=%3C201201091948.32026.thomas%40btspuhler.com%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="011185.html">
<LINK REL="Next" HREF="011198.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] Fwd: Re: [Kolab-devel] Supercolliding a PHP array - DoS Attacks</H1>
<B>Thomas Spuhler</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Fwd%3A%20Re%3A%20%5BKolab-devel%5D%20Supercolliding%20a%20PHP%20array%20-%0A%09DoS%20Attacks&In-Reply-To=%3C201201091948.32026.thomas%40btspuhler.com%3E"
TITLE="[Mageia-dev] Fwd: Re: [Kolab-devel] Supercolliding a PHP array - DoS Attacks">thomas at btspuhler.com
</A><BR>
<I>Tue Jan 10 03:48:31 CET 2012</I>
<P><UL>
<LI>Previous message: <A HREF="011185.html">[Mageia-dev] [RFC] Moving various packages/codecs to tainted
</A></li>
<LI>Next message: <A HREF="011198.html">[Mageia-dev] Fwd: Re: [Kolab-devel] Supercolliding a PHP array - DoS Attacks
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#11193">[ date ]</a>
<a href="thread.html#11193">[ thread ]</a>
<a href="subject.html#11193">[ subject ]</a>
<a href="author.html#11193">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>I got this from the Kolab folks:
---------- Forwarded Message ----------
-----Message original-----
De: "ABBAS Alain" <<A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">alain.abbas at libertech.fr</A>>
Envoyé: 9 janvier 2012 22:48:02 UTC
A: <A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">kolab-users at kolab.org</A>
Cc: <A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">kolab-devel at kolab.org</A>
Sujet : [Kolab-devel] Supercolliding a PHP array - DoS Attacks
Hello
There are a serious Dos Attack issue in PHP prior to 5.3.9
This attack is more than easy and serious.
PHP 5.3.9 has a change to prevent this DoS attack. Microsoft's also has this
issue which MS and made an
emergency patch available last week to fix this.
see the links
<A HREF="http://nikic.github.com/2011/12/28/Supercolliding-a-PHP-array.html">http://nikic.github.com/2011/12/28/Supercolliding-a-PHP-array.html</A>
<A HREF="http://cryptanalysis.eu/blog/2011/12/28/effective-dos-attacks-against-web-">http://cryptanalysis.eu/blog/2011/12/28/effective-dos-attacks-against-web-</A>
application-plattforms-hashdos/
<A HREF="http://williamedwardscoder.tumblr.com/post/14939418095/hash-table-attacks-">http://williamedwardscoder.tumblr.com/post/14939418095/hash-table-attacks-</A>
impervious-hash-tables
oops typo
does Kolab.org plan to give an update of php for this security issue?
Regards
_______________________________________________
Kolab-devel mailing list
<A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">Kolab-devel at kolab.org</A>
<A HREF="https://kolab.org/mailman/listinfo/kolab-devel">https://kolab.org/mailman/listinfo/kolab-devel</A>
--
Best regards
Thomas Spuhler
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="011185.html">[Mageia-dev] [RFC] Moving various packages/codecs to tainted
</A></li>
<LI>Next message: <A HREF="011198.html">[Mageia-dev] Fwd: Re: [Kolab-devel] Supercolliding a PHP array - DoS Attacks
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#11193">[ date ]</a>
<a href="thread.html#11193">[ thread ]</a>
<a href="subject.html#11193">[ subject ]</a>
<a href="author.html#11193">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
