PHP又有重大漏洞 多语言拒绝服务漏洞事件预警解决办法
PHP又有重大漏洞 多语言拒绝服务漏洞事件预警
安全部门监测到目前PHP 5.3.9被黑客发现存在严重的安全漏洞,远程攻击者可以直接利用此漏洞执行任意PHP代码,安全风险非常高。经过跟进,该漏洞(CVE-2012-0830)是由于PHP官方为解决多语言hash漏洞引入了新的机制产生的新的安全漏洞。
【漏洞影响版本】
PHP5.3.9
注:在修复PHP多语言hash漏洞时若采用直接打补丁的方式(补丁地址:点击查看)不受此漏洞影响。
【修复方案】
目前PHP官方已经紧急发布了5.3.10,下载地址为点击进入 ,请所有使用PHP 5.3.9版本的机器负责人尽快更新到PHP 5.3.10,建议更新前先进行测试。
之前还没有完成PHP多语言hash漏洞修复(即目前还没有升级到PHP 5.3.9)的同事现在可以直接升级到5.3.10来完成漏洞修复,不要再使用PHP 5.3.9版本。
请各位应用运维开发同学尽快检测相关服务器并及时修复此漏洞
------解决方案--------------------
很好的提醒,劳驾斑竹同学,能不能翻译一下,写个安装教程?谢谢。
------解决方案--------------------
你居然说"又"....你居然说"又"....
------解决方案--------------------
本人不用多语言。哈哈
------解决方案--------------------

Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

AI Hentai Generator
Generate AI Hentai for free.

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics



PHP 8.4 brings several new features, security improvements, and performance improvements with healthy amounts of feature deprecations and removals. This guide explains how to install PHP 8.4 or upgrade to PHP 8.4 on Ubuntu, Debian, or their derivati

To work with date and time in cakephp4, we are going to make use of the available FrozenTime class.

To work on file upload we are going to use the form helper. Here, is an example for file upload.

CakePHP is an open-source framework for PHP. It is intended to make developing, deploying and maintaining applications much easier. CakePHP is based on a MVC-like architecture that is both powerful and easy to grasp. Models, Views, and Controllers gu

Validator can be created by adding the following two lines in the controller.

Logging in CakePHP is a very easy task. You just have to use one function. You can log errors, exceptions, user activities, action taken by users, for any background process like cronjob. Logging data in CakePHP is easy. The log() function is provide

Visual Studio Code, also known as VS Code, is a free source code editor — or integrated development environment (IDE) — available for all major operating systems. With a large collection of extensions for many programming languages, VS Code can be c

CakePHP is an open source MVC framework. It makes developing, deploying and maintaining applications much easier. CakePHP has a number of libraries to reduce the overload of most common tasks.
