This host is installed with PHP and is prone to remote code execution vulnerability.

Successful exploitation will allow remote attackers to allow a remote attacker to cause a heap-based buffer overflow, resulting in a denial of service. Impact Level: Application

Upgrade to PHP version 5.5.8 or later. For updates refer to http://www.php.net

The flaw is due to error in 'scan function' in 'ext/date/lib/parse_iso_intervals.c' which does not validate user-supplied input when handling 'DateInterval' objects.

PHP versions 5.5.6 and prior.

Get the installed version of PHP with the help of detect NVT and check the version is vulnerable or not.

• http://git.php.net/?p=php-src.git;a=commit;h=12fe4e90be7bfa2a763197079f68f5568a14e071
• http://osvdb.org/100440

---

Updated on 2015-03-25