'Privacy is not something that We merely entitled to, it's an absolute prerequisite'
Strong advocate of privacy, anonymity and network neutrality since 2009.
PHP7 w/ NGINX + PHP-FPM – Remote Code Execution (CVE-2019-11043)
PHP7 w/ NGINX + PHP-FPM – Remote Code Execution (CVE-2019-11043)
Blog Image

Discussion:

A recently patched security flaw in modern versions of the PHP programming language is being exploited in the wild to take over servers, ZDNet has learned from threat intelligence firm Bad Packets.

The vulnerability is a remote code execution (RCE) in PHP 7, the newer branch of PHP, the most common programming language used to build websites. The issue, tracked as CVE-2019-11043, lets attackers run commands on servers just by accessing a specially-crafted URL.

Fortunately, not all PHP-capable web servers are impacted. Only NGINX servers with PHP-FPM enabled are vulnerable. PHP-FPM, or FastCGI Process Manager, is an alternative PHP FastCGI implementation with some additional features.

References:
    https://www.zdnet.com/article/nasty-php7-remote-code-execution-bug-exploited-in-the-wild/
    https://bugs.php.net/bug.php?id=78599

Leave a Reply

Your email address will not be published. Required fields are marked *