These new PHP vulnerabilities are a big deal, y'all. My admin tells me in-the-wild exploitation was seen earlier today. There are apparently several proof of concept exploits floating around that let you send arbitrary commands to the server.
1 Boost
0 Likes
@briankrebs physician heal thyself
@briankrebs it has to be. I don't really recall PHP team doing such an announcement before a security patch.
If this is going to be openly exploitable, it will turn into quite a mess. Seeing how some service providers manage their perimeter (as in: they don't) it could be quite the mess.
@en3py seeing some info to suggest about 70 percent of the Internet is going to have to deal with this.
@briankrebs baaaaahahahahahaha
@briankrebs
Getting ARS down error. Speculation?
@Fringedcrow I think we're going to be seeing this page on a lot of sites today
@briankrebs And Ars is down for maintenance...