This host is installed with PHP and is prone to multiple denial of service vulnerabilities.

Successful exploitation could allow remote attackers to cause denial of service conditions. Impact Level: Application

Upgrade to PHP version 5.4.0 or later, For updates refer to http://php.net/downloads.php

Multiple flaws are due to - An error in application which makes calls to the 'zend_strndup()' function without checking the returned values. A local user can run specially crafted PHP code to trigger a null pointer dereference in zend_strndup() and cause the target service to crash. - An error in 'tidy_diagnose' function, which might allows remote attackers to cause a denial of service via crafted input.

PHP Version 5.3.8 on Windows.

• http://archives.neohapsis.com/archives/bugtraq/2012-01/0092.html
• http://cxsecurity.com/research/103
• http://securitytracker.com/id/1026524
• http://www.exploit-db.com/exploits/18370/

---

Updated on 2015-03-25