maplesyrupguy

3 ms·

1. 1.▲
   by maplesyrupguy 11y ago

   It's neither. However, using what's described in the post, it's possible to write an exploit for that CVE, as well as a few others. - Tim M.
2. 2.▲
   Exploiting Memory Corruption Bugs in PHP Part 3: Popping Remote Shells(inulledmyself.com)

   18 points by maplesyrupguy 11y ago|3 comments
3. 3.▲
   by maplesyrupguy 12y ago

   I believe it would depend on how PHP is setup for that particular host. If each user has their own executable, they're more than likely fine. If they share one, then it's definitely a problem.
4. 4.▲
   by maplesyrupguy 12y ago

   Blog author here. It's remote(unlike part one, where we declared variables and such) due to the fact that the exploit will work if the site takes user input and unserializes it. (For instance: a certain popular adult entertainment bill