A rather serious bug has been found in PHP. Specifically if you use PHP as CGI. The bug got accidentally disclosed before it was fixed and this information seems to spead quickly. It also looks like it's trivial to abuse. You might want to verify your setup.
A copy of the disclosed information can be found here: http://ompldr.org/vZGxxaQ
A copy of the disclosed information can be found here: http://ompldr.org/vZGxxaQ
).