This host is running PHP and is prone to security bypass vulnerability.

Successful exploitation could allows remote attackers to bypass intended access restrictions by modifying data structures that were not intended to depend on external input. Impact Level: Network

Upgrade to PHP version 5.2.15 or later For updates refer to http://www.php.net/downloads.php

The flaw is due to error in 'extract()' function, it does not prevent use of the 'EXTR_OVERWRITE' parameter to overwrite the GLOBALS superglobal array.

PHP version prior to 5.2.15

• http://www.openwall.com/lists/oss-security/2010/12/13/4
• http://www.php.net/releases/5_2_15.php

---

Updated on 2015-03-25