Friday, 2 March 2007

The Month of PHP Bugs Started

Stefan Esser in a post over the PHP Security blog tells you about the beginning of the Month of PHP bugs. He further says that the initiative is hosted on dedicated servers.

The PHP Security web site gives a detailed view of this Month of PHP bugs. The Hardened-PHP states that this initiative is an effort to improve the security of PHP. However, they don’t concentrate on problems in the PHP language that might result in insecure PHP applications but on security vulnerabilities in the PHP core. During March 2007 old and new security vulnerabilities in the Zend Engine, the PHP core and the PHP extensions will be disclosed in a day-to-day basis.

They have listed the following five bugs to start with the Month of PHP Bugs with a description for each of them. They are as follows:

• PHP unserialize()64 bit
• unserialize() ZVAL
• PHP Variable Destructor
• PHP Executor Deep
• PHP 4 Userland ZVAL