php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #29373 Possibly DOS exploit using get_headers function
Submitted: 2004-07-25 07:59 UTC Modified: 2004-07-25 16:03 UTC
From: zbuckholz at hotmail dot com Assigned:
Status: Not a bug Package: Reproducible crash
PHP Version: 5.0.0 OS: Linux RedHat 9
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: zbuckholz at hotmail dot com
New email:
PHP Version: OS:

 

 [2004-07-25 07:59 UTC] zbuckholz at hotmail dot com
Description:
------------
Short example below will cause complete exhaustion. Seems to cause loop of some sort.

<?php
 $server_name = ("http://" . $_SERVER['SERVER_NAME']);
 print_r(get_headers($server_name,true));
?>

from apache error log
[Sat Jul 24 22:21:15 2004] [error] server reached MaxClients setting, consider raising the MaxClients setting



Reproduce code:
---------------
<?php
 $server_name = ("http://" . $_SERVER['SERVER_NAME']);
 print_r(get_headers($server_name));
?>

Expected result:
----------------
I expect to see what the documentation says I should see. But in the example code the $url is being provided to the get_headers function as a predefined string.

Actual result:
--------------
[Sat Jul 24 22:21:15 2004] [error] server reached MaxClients setting, consider raising the MaxClients setting

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-07-25 16:03 UTC] gschlossnagle@php.net
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php

You\'ve coded an infinite loop, those tend to exhaust 
resources.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Wed Jul 02 12:01:36 2025 UTC