← Back to context

Comment by whycome

11 hours ago

Are there security patches for servers running old versions?

There are so many keeping old php versions alive for compatibility with whatever software

7 comments

whycome

Reply
ljm  10 hours ago

The CVE wasn't clear about the impact and suggested every version after 5. That is going back over a fucking decade, almost two.

There's a lot of zombie software on the net that is ripe for the picking. More food for the botnet.

Wordpress in particular is a stupidly simple vector.

  • ashkankiani  10 hours ago

    At this point, it would be fastest/most effective for the PHP foundation to deploy their own white-hat mass hacking attack to exploit the vulnerability and forcefully shutdown vulnerable servers.

    I can't think of a faster way to clear out the vulnerable surface area.