PHP 5.3.x < 5.3.15 Multiple Vulnerabilities

NASLDB: PHP 5.3.x < 5.3.15 Multiple Vulnerabilities

General

ID: 60085
Name: PHP 5.3.x < 5.3.15 Multiple Vulnerabilities

Summary: Checks version of PHP

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: CVSS2#E:POC/RL:OF/RC:C

Port: 80
Family: CGI abuses
Type: Remote

Description

According to its banner, the version of PHP installed on the remote
host is 5.3.x earlier than 5.3.15, and is, therefore, potentially
affected by the following vulnerabilities :

– An unspecified overflow vulnerability exists in the
function ‘_php_stream_scandir’ in the file
‘main/streams/streams.c’. (CVE-2012-2688)

– An unspecified error exists that can allow the
‘open_basedir’ constraint to be bypassed.
(CVE-2012-3365)