Comments on: Nginx + PHP CGI的一个可能的安全漏洞 http://www.laruence.com/2010/05/20/1495.html PHP语言, PHP扩展, Zend引擎相关的研究,技术,新闻分享 - 左手代码 右手诗 Thu, 09 Feb 2012 12:31:57 +0000 hourly 1 http://wordpress.org/?v=3.1.2 By: Nginx(PHP/fastcgi)的PATH_INFO问题 » ijser http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-5403 Nginx(PHP/fastcgi)的PATH_INFO问题 » ijser Fri, 18 Nov 2011 07:00:08 +0000 http://www.laruence.com/?p=1495#comment-5403 [...] 最近发现的一个安全漏洞(Nginx + PHP CGI的一个可能的安全漏洞)和这个配置有关系, 请大家务必在使用第二种配置的时候,关闭cgi.fix_pathinfo. [...] [...] 最近发现的一个安全漏洞(Nginx + PHP CGI的一个可能的安全漏洞)和这个配置有关系, 请大家务必在使用第二种配置的时候,关闭cgi.fix_pathinfo. [...]

]]> By: Anonymous http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-4909 Anonymous Tue, 13 Sep 2011 10:34:19 +0000 http://www.laruence.com/?p=1495#comment-4909 我试了，我的nginx/0.7.67版本没有这个问题 我试了，我的nginx/0.7.67版本没有这个问题

]]> By: nginx php fpm紧急漏洞修复！cgi.fix_pathinfo – www.ncun123.com博客 http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-4736 nginx php fpm紧急漏洞修复！cgi.fix_pathinfo – www.ncun123.com博客 Wed, 10 Aug 2011 10:32:44 +0000 http://www.laruence.com/?p=1495#comment-4736 [...] PS: 鸣谢laruence大牛在分析过程中给的帮助 [...] [...] PS: 鸣谢laruence大牛在分析过程中给的帮助 [...]

]]> By: PATH_INFO是一个CGI 1.1的标准，经常用来做为传参载体. – www.ncun123.com博客 http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-4735 PATH_INFO是一个CGI 1.1的标准，经常用来做为传参载体. – www.ncun123.com博客 Wed, 10 Aug 2011 07:49:19 +0000 http://www.laruence.com/?p=1495#comment-4735 [...] 最近发现的一个安全漏洞(Nginx + PHP CGI的一个可能的安全漏洞)和这个配置有关系, 请大家务必在使用第二种配置的时候,关闭cgi.fix_pathinfo. [...] [...] 最近发现的一个安全漏洞(Nginx + PHP CGI的一个可能的安全漏洞)和这个配置有关系, 请大家务必在使用第二种配置的时候,关闭cgi.fix_pathinfo. [...]

]]> By: nginx文件类型错误解析漏洞 | 一沙一世界 一花一天堂 http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-4585 nginx文件类型错误解析漏洞 | 一沙一世界 一花一天堂 Sun, 10 Jul 2011 05:34:50 +0000 http://www.laruence.com/?p=1495#comment-4585 [...] 鸣谢laruence大 [...] [...] 鸣谢laruence大 [...]

]]> By: Penetration Testing Lab › Nginx Security Law http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-4135 Penetration Testing Lab › Nginx Security Law Sat, 09 Apr 2011 01:58:11 +0000 http://www.laruence.com/?p=1495#comment-4135 [...] [1]http://hi.baidu.com/yuange1975/blog/item/4c223031a6727eaf5edf0e46.html [2]http://www.laruence.com/2010/05/20/1495.html This was written by admin. Posted on Friday, May 21, 2010, at 12:51 pm. Filed under Exploit. [...] [...] [1]http://hi.baidu.com/yuange1975/blog/item/4c223031a6727eaf5edf0e46.html [2]http://www.laruence.com/2010/05/20/1495.html This was written by admin. Posted on Friday, May 21, 2010, at 12:51 pm. Filed under Exploit. [...]

]]> By: nginx文件类型错误解析漏洞 | Seczone http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-4114 nginx文件类型错误解析漏洞 | Seczone Mon, 04 Apr 2011 13:49:48 +0000 http://www.laruence.com/?p=1495#comment-4114 [...] PS: 鸣谢laruence大牛在分析过程中给的帮助 [...] [...] PS: 鸣谢laruence大牛在分析过程中给的帮助 [...]

]]> By: Wiki http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-4093 Wiki Fri, 01 Apr 2011 11:49:31 +0000 http://www.laruence.com/?p=1495#comment-4093 <a href="http://hu.wikipedia.org/wiki/Kezd%C5%91lap" rel="nofollow">Wiki</a> is a very useful page. Wiki is a very useful page.

]]> By: DADSA http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-3982 DADSA Tue, 22 Mar 2011 15:45:39 +0000 http://www.laruence.com/?p=1495#comment-3982 DASASDSA DASASDSA

]]> By: hosting http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-3965 hosting Mon, 21 Mar 2011 01:20:38 +0000 http://www.laruence.com/?p=1495#comment-3965 This is awsome water text effect :()) This is awsome water text effect :( ))

]]> By: 搜索引擎优化 http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-3558 搜索引擎优化 Thu, 23 Dec 2010 09:27:21 +0000 http://www.laruence.com/?p=1495#comment-3558 试一下这代码，验证一下~ 试一下这代码，验证一下~

]]> By: Wholesale Caps http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-3458 Wholesale Caps Mon, 22 Nov 2010 09:33:47 +0000 http://www.laruence.com/?p=1495#comment-3458 beautiful.we are waiting for you. beautiful.we are waiting for you.

]]> By: Cheap Hats http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-3457 Cheap Hats Mon, 22 Nov 2010 09:32:44 +0000 http://www.laruence.com/?p=1495#comment-3457 it`s worth to try. it`s worth to try.

]]> By: youstar » 80后爆nginx 0day漏洞,测试可行~ http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-3319 youstar » 80后爆nginx 0day漏洞,测试可行~ Wed, 13 Oct 2010 02:02:08 +0000 http://www.laruence.com/?p=1495#comment-3319 [...] Laruence：Nginx + PHP CGI的一个可能的安全漏洞：连接 [...] [...] Laruence：Nginx + PHP CGI的一个可能的安全漏洞：连接 [...]

]]> By: film izle http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-3283 film izle Tue, 28 Sep 2010 14:18:33 +0000 http://www.laruence.com/?p=1495#comment-3283 thanks you , All are nice t-shirts the color combination is good. thanks you , All are nice t-shirts the color combination is good.

]]> By: new era hats http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-3253 new era hats Mon, 20 Sep 2010 01:14:04 +0000 http://www.laruence.com/?p=1495#comment-3253 Hi,verybody,I will come again. Hi,verybody,I will come again.

]]> By: Anonymous http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-3168 Anonymous Mon, 06 Sep 2010 20:17:45 +0000 http://www.laruence.com/?p=1495#comment-3168 if ($request_filename ~* (.*)\\.php) { set $php_url $1; } if (!-e $php_url.php) { return 403; } blog:blog.sina.com.cn/harleychen if ($request_filename ~* (.*)\\.php) {
set $php_url $1;
}
if (!-e $php_url.php) {
return 403;
}

blog:blog.sina.com.cn/harleychen

]]> By: Trail's Blog » Nginx(PHP/fastcgi)的PATH_INFO问题 http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-3064 Trail's Blog » Nginx(PHP/fastcgi)的PATH_INFO问题 Fri, 06 Aug 2010 06:52:29 +0000 http://www.laruence.com/?p=1495#comment-3064 [...] 最近发现的一个安全漏洞(Nginx + PHP CGI的一个可能的安全漏洞)和这个配置有关系, 请大家务必在使用第二种配置的时候,关闭cgi.fix_pathinfo. [...] [...] 最近发现的一个安全漏洞(Nginx + PHP CGI的一个可能的安全漏洞)和这个配置有关系, 请大家务必在使用第二种配置的时候,关闭cgi.fix_pathinfo. [...]

]]> By: SerranoMaritza33 http://www.laruence.com/2010/05/20/1495.html/comment-page-2#comment-2992 SerranoMaritza33 Mon, 26 Jul 2010 22:23:06 +0000 http://www.laruence.com/?p=1495#comment-2992 Following my own exploration, thousands of persons on our planet receive the <a href="http://bestfinance-blog.com/topics/personal-loans" rel="nofollow">personal loans</a> from good banks. Therefore, there's great possibilities to receive a car loan in all countries. Following my own exploration, thousands of persons on our planet receive the personal loans from good banks. Therefore, there’s great possibilities to receive a car loan in all countries.

]]> By: nginx文件类型错误解析漏洞 | 会跳舞的鞋子 http://www.laruence.com/2010/05/20/1495.html/comment-page-1#comment-2974 nginx文件类型错误解析漏洞 | 会跳舞的鞋子 Fri, 23 Jul 2010 07:29:40 +0000 http://www.laruence.com/?p=1495#comment-2974 [...] 鸣谢laruence大牛在分析过程中给的帮助 这篇日志发表于 Jul 22nd, 2010 08:31 于分类 [...] [...] 鸣谢laruence大牛在分析过程中给的帮助 这篇日志发表于 Jul 22nd, 2010 08:31 于分类 [...]

]]>