PHP Error Logging Format String Vulnerability

There is a vulnerability in the code that handles error logging on PHP scripts. Unauthorized users can exploit this vulnerability by crafting a string containing malicious format specifiers.

If successfully exploited, malicious users can obtain Web server privileges on the target host.

Upgrade to PHP Version 4.0.3 or later as soon as possible. You can download PHP fromhttp://www.php3.org/downloads.php.