News for hackers. Stuff that matters.

A comment on PHP-CGI Vulnerability Exploited in the Wild. Parent comment

Re:PHP-CGI Vulnerability Exploited in the Wild by shebson on Tuesday May 08, 2012 @02:22PM (#3945125)
My thought exactly. Anyone who keeps their stack up to date is using the Apache2 Handler or FastCGI. Even if they're still on Apache1, mod_php isn't vulnerable.
[ Parent | on HN ]
Re:PHP-CGI Vulnerability Exploited in the Wild by mike-cardwell on Tuesday May 08, 2012 @02:37PM (#3945205)
If you're serving sites for multiple different users (eg shared hosting) you can't safely use mod_php as all of the php would end up running under the same uid.

I bet there are still tens of thousands of otherwise secure php-cgi setups out there.

[ Parent | on HN ]