[imp] Is IMP vulnerable to the PHP syslog() bug?

Bill Tihen -- Information Technology bill@mail.tasis.ch
Thu, 26 Oct 2000 17:41:52 +0200 (CEST)


That is what I understood and given the problems with the update and IMP I just
made sure logging was off, which it was by default.  However, I guess I should
still update Apache.

Bill

Quoting Chuck Hagenbuch <chuck@horde.org>:
> 
> I just read through the vulnerability again, and from the description,
> this
> _only_ affects cases where log_errors is turned on in php(3).ini. Use of
> php's
> syslog() function is not problematic.
>