This host is running PHP and is prone to HTTP header injection vulnerability.

Successful exploitation could allows remote attackers to insert arbitrary headers, conduct cross-site request-forgery, cross-site scripting, HTML-injection, and other attacks. Impact Level: Application

Upgrade to PHP 5.4.1 RC1 or later For updates refer to http://www.php.net/downloads.php

The sapi_header_op function in main/SAPI.c in PHP does not properly determine a pointer during checks for %0D sequences.

PHP version prior to 5.3.11 PHP version 5.4.x through 5.4.0RC2

• http://openwall.com/lists/oss-security/2012/09/02/1
• http://openwall.com/lists/oss-security/2012/09/05/15
• http://openwall.com/lists/oss-security/2012/09/07/3
• http://security-tracker.debian.org/tracker/CVE-2012-4388

---

Updated on 2017-03-28