Re: Mambo, Coppermine and PHPBB Attacks

[Paul Laudanski <zx () castlecops com>]

On Mon, 26 Dec 2005, Yasuo Ohgaki wrote:

> But I don't insist nx bit support is useless.

I'm not sure I follow this one?  Are you meaning:

http://en.wikipedia.org/wiki/NX_bit

> Anyway, most php script do not need remote script execution feature.
> And even with SELinux, it cannot prevent to execute remote code while
> access to local file could be rejected and reported.
>
> Making allow_url_fopen useless is bad thing.

Can you expand on this one please, or are you throwing it back to your 
original reply?

-- 
Paul Laudanski, Microsoft MVP Windows-Security
[cal] http://events.castlecops.com
[de] http://de.castlecops.com
[en] http://castlecops.com
[wiki] http://wiki.castlecops.com
[family] http://cuddlesnkisses.com