PHP floating point bug - potential DoS threat

[Paul B]

Thankfully the server my site runs on is safe.

I expect there will be lots of script kiddies trying to take servers down over the next few days.

 

[M@rc]

I expect there will be lots of script kiddies trying to take servers down over the next few days.

I hope not. I've thought about that from the start and wanted someone to remove the script from the first post.

PS. The server my site runs on is also safe,

 

[Mikey]

mikey@aeon:~$ php testbug.php
Testing float behaviour. If this script hangs or terminates with an error message due to maximum execution time limit being reached, you should update your PHP installation asap!
For more information refer to <http://bugs.php.net/53632>.
Your system seems to be safe.

I guess I'm safe

 

[James Freeman]

My localhost server is safe, and my main server is safe, considering it's running x64

 

[Neutral Singh]

I am Safe!!

 

[CTXMedia]

Safe too ... phew!!!

 

[CTXMedia]

Oh, and thanks for highlighing the test script ... two minute job to test ... cheers.

 

[Dan]

I ran the test file and it just returned, no echo, no hang. I guess I am fine?

 

[steven s]

I ran the test file and it just returned, no echo, no hang. I guess I am fine?

It should return
Your system seems to be safe.

 

[Jo.]

Still waiting to hear from our server host... ugh.

 

[Jo.]

Is this serious enough that it would be worth closing our forum if our server host can't fix it til tomorrow? They need to do an upgrade in order for our server to get the PHP update... but they're not doing that until tomorrow (US time).

 

[Paul B]

Closing your forum won't make much difference as the whole server will crash if vulnerable.
Having said that, there is the possibility of corruption of the database, albeit remote.

As long as you have a current backup of your database you can restore from, you should be fine.
I would take one now just in case.

 

[Jo.]

okay thanks Brogan... going to do a back up now.

 

[maidos]

anyone know how to run cli through ssh?

 

[Taylor J]

anyone know how to run cli through ssh?

Do cd blah blah (where ever the php file is located)

then do

php insertphpfilenamehere.php

and it will run and tell you.

 

[Shamil]

CLI doesn't work on Windows :/ hmm 64-bit PHP...

 

[JonathanC]

root@server1 [/home/******/********************]# php test.php
Testing float behaviour. If this script hangs or terminates with an error message due to maximum execution time limit being reached, you should update your PHP installation asap!
For more information refer to <http://bugs.php.net/53632>.
Your system seems to be safe.

 

[motowebmaster]

I run 64-bit php, but did the test anyway and was deemed safe.

copy the test php code into a file and run it directly from the command line. For example:

php testfile.php

Thanks for letting us know

 

[maidos]

ok thanks it works. seems 5 of my servers are safe

 

[Pope Viper]

Script just hung on me, I'm running Windows 2008 R2, with 32-bit PHP (sigh).

Guess I need to look up the 64bit version.

Thanks for the info, Kier.

*Edit - Or not, seems there isn't an official 64bit version for Windows.

Naturally.

Someday I'll move to a Unix server... Some. Day.