3 ms·

It would be interesting to know what percent of these vulnerabilities are remote.

• duskwuff 12y ago
  Depends on what the application exposes. For instance, the recent unserialize() vulnerability is remote if the application deserializes data from the user. This is a bad idea, but a lot of applications do it anyway.
  • wvenable 12y ago
    Deserializing data from the user is itself a security vulnerability, in my opinion. Given that we have not had a mass outbreak of PHP vulnerabilities, I imagine the impact here is low. I wouldn't be surprised is the Linux distributions that these sites run on have just as many vulnerabilities if you use the same criteria as presented here.
    • trebor 12y ago
      An unserialize attack would require intimate knowledge of the operating codebase, as well as an encoded object (only objects can be exploited this way) that could be configured to execute an attack via its constructor or __set_state() method. Or, installing a backdoor through another CVE to create the opportunity for just this kind of attack. It's complex, but not unknown. I'm not aware of any major applications (WordPress, Drupal, etc) that deserialize user input. That's not to say a plugin or theme might be unsafe, but not in the core code that I've seen.
• deleted 12y ago
  [deleted]