This host is installed with PHP and is prone to multiple vulnerabilities.

Successful exploitation will allow remote attackers to overwrite arbitrary files, conduct denial of service attacks or potentially execute arbitrary code. Impact Level: System/Application

Upgrade to PHP version 5.4.32 or 5.5.16 or later, For updates refer to http://php.net

The flaws exist due to, - Multiple overflow conditions in the 'php_parserr' function within ext/standard/dns.c script. - Integer overflow in the 'cdf_read_property_info' function in cdf.c within the Fileinfo component. - An error in the '_php_image_output_ctx' function within ext/gd/gd_ctx.c script as NULL bytes in paths to various image handling functions are not stripped.

PHP version 5.4.x before 5.4.32 and 5.5.x before 5.5.16

Get the installed version of PHP with the help of detect NVT and check the version is vulnerable or not.

• http://php.net/ChangeLog-5.php
• http://secunia.com/advisories/57349
• http://secunia.com/advisories/59709
• http://www.osvdb.com/110251

---

Updated on 2017-03-28