?
avatar nidhinmp
nidhinmp
6 Apr 2016

Steps to reproduce the issue

we have successfully saved the articles on the DR SITE server till now, logging in from a remote node
for which port opening done on DR SITE SERVER ...using jooomla 2.5.3 php version 5.3.3. After upgradation of IPS software on DR SITE, we are unable to save the artciles on the server.
Our network group has provided the description of the error as under:

The filter detects and attempts to exploit a denial-of-service vulnerability in the implementation of the hashing algorithm by multiple vendors. A denial-of-service vulnerability exists in the way of multiple vendors handle specially crafted http requests that will lead to hash collision. the below CVEs of Apache and PHP can be referred for immediate reference: CVE-2011-5034, CVE-2011-4885, CVE-2011-4858

Ater going through the error, we have upgraded the PHP from 5.3.3 to 5.6.18...a fix version available for the
above problem., Even then, there is no change in the status., we are uable to save the articles.

Expected result

when we click save and close., system should save the article on the DR SITE server and should show in the
pick list of the articles.

Actual result

the connection has timed out

System information (as much as possible)

RED HAT ENTERPIRSE LINUX 6
APACHE SERVER 2.2.15
PHP 5.6.18

Additional comments

avatar nidhinmp nidhinmp - open - 6 Apr 2016
avatar brianteeman brianteeman - change - 6 Apr 2016
Status New Closed
Closed_Date 0000-00-00 00:00:00 2016-04-06 11:22:49
Closed_By brianteeman
avatar brianteeman brianteeman - close - 6 Apr 2016
avatar nidhinmp nidhinmp - change - 6 Apr 2016
The description was changed
avatar nidhinmp
nidhinmp - comment - 6 Apr 2016

screen shots attached for the above problemscreen shot 2016-04-06 at 06 41 02screen shot 2016-04-06 at 06 41 06screen shot 2016-04-06 at 06 41 12screen shot 2016-04-06 at 06 41 17screen shot 2016-04-06 at 06 41 25


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/9755.

avatar brianteeman
brianteeman - comment - 6 Apr 2016

Joomla 2.5.3 is absolutely not supported any more. Joomla 2.5 was end of
life several years ago and 2.5.3 was even older than that

For support please use the forum http://forum.joomla.org

On 6 April 2016 at 12:41, nidhinmp notifications@github.com wrote:

screen shots attached for the above problem[image: screen shot 2016-04-06
at 06 41 02]
https://camo.githubusercontent.com/5f33c0ada496939a4f925711e37fb6833374aacc/68747470733a2f2f6973737565732e6a6f6f6d6c612e6f72672f75706c6f6164732f312f39343738663964313866656538386461333739613866306435363832353834302e706e67[image:
screen shot 2016-04-06 at 06 41 06]
https://camo.githubusercontent.com/8e0e71b33e912ed48c1a65639d666ece0ed23d55/68747470733a2f2f6973737565732e6a6f6f6d6c612e6f72672f75706c6f6164732f312f66333665346562616238613435663031373838356161623364303233363663662e706e67[image:
screen shot 2016-04-06 at 06 41 12]
https://camo.githubusercontent.com/b316d676f6d9602a33c949f07a0bb4539dc936a9/68747470733a2f2f6973737565732e6a6f6f6d6c612e6f72672f75706c6f6164732f312f63636438396438363762363163353662363138663239643963663463303665322e706e67[image:
screen shot 2016-04-06 at 06 41 17][image: screen shot 2016-04-06 at 06
41 25]

https://camo.githubusercontent.com/620352416f3ee65ef8edfee6378e70b381c06b1a/68747470733a2f2f6973737565732e6a6f6f6d6c612e6f72672f75706c6f6164732f312f62306431366139383961653032666663363866663334643136323663616136662e706e67

This comment was created with the J!Tracker Application
https://github.com/joomla/jissues at issues.joomla.org/joomla-cms/9755
https://issues.joomla.org/tracker/joomla-cms/9755.


You are receiving this because you modified the open/close state.
Reply to this email directly or view it on GitHub
#9755 (comment)

Brian Teeman
Co-founder Joomla! and OpenSourceMatters Inc.
http://brian.teeman.net/

Add a Comment

Login with GitHub to post a comment