Vulnerability in PHP versions 4.2.0 or 4.2.1. Upgrade to version 4.2.2 NOW!

quote:

---

This vulnerability could be used by a remote attacker to execute arbitrary code or crash PHP and/or the web server.

---

More info available at: http://www.cert.org/advisories/CA-2002-21.html

The PHP Group further states in it's own advisory:

quote:

---

This vulnerability may be exploited to compromise the web server and, under certain conditions, to gain privileged access.

---

Also important to note:

quote:

---

Although this vulnerability only affects PHP 4.2.0 and 4.2.1, e-matters GmbH has previously identified vulnerabilities in older versions of PHP. If you are running older versions of PHP, we encourage you to review http://security.e-matters.de/advisories/012002.html

---