[imp] Is IMP vulnerable to the PHP syslog() bug?
Bill Tihen -- Information Technology
bill@mail.tasis.ch
Thu, 26 Oct 2000 17:41:52 +0200 (CEST)
That is what I understood and given the problems with the update and IMP I just
made sure logging was off, which it was by default. However, I guess I should
still update Apache.
Bill
Quoting Chuck Hagenbuch <chuck@horde.org>:
>
> I just read through the vulnerability again, and from the description,
> this
> _only_ affects cases where log_errors is turned on in php(3).ini. Use of
> php's
> syslog() function is not problematic.
>