Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My shared hosting provider uses PHP 5.2.5, which was released at the end of 2007. I would like to know the security holes of PHP 5.2.5. Where I can get them?

phpinfo

share|improve this question

migrated from stackoverflow.com Dec 16 '10 at 16:18

This question came from our site for professional and enthusiast programmers.

12  
The first one is letting everyone know that the phpinfo file is public on your server –  Michael B. Dec 16 '10 at 16:14
1  
Have to agree with @Michael B. - remove that file ASAP. –  middaparka Dec 16 '10 at 16:15
2  
Ask your provider to install a more recent version of PHP. The PHP5.2 branch has officially reached End Of Support as of Dec, 16 2010. Everyone is encouraged to upgrade to the PHP 5.3 branch. –  Gordon Dec 16 '10 at 16:17
1  
You might be in luck over at security.stackexchange.com aswell –  Chris Andrè Dale Dec 16 '10 at 16:50
    
@Michael B., feel free to hack –  ilhan Dec 16 '10 at 23:40

4 Answers 4

up vote 3 down vote accepted

PHP ChangeLog ... check anything above 5.2.5 in 5.2.x series only..

share|improve this answer

Curiously enough, specific security issues aren't often published (otherwise they'd be very easy to exploit), but you can generally get an idea from the changelogs for subsequent releases.

share|improve this answer

Vulnerabilities are on this page:

http://www.securityfocus.com/bid/29009/references

share|improve this answer

If you are after really long and extensive list go here: security focus, if you are just after publicly available exploits, you may wanna search exploitdb. There is nothing major from what I've seen so far.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.