Test ID:	1.3.6.1.4.1.25623.1.0.803764
Category:	Web application abuses
Title:	PHP SOAP Parser Multiple Information Disclosure Vulnerabilities
Summary:	PHP is prone to multiple information disclosure vulnerabilities.
Description:	Summary: PHP is prone to multiple information disclosure vulnerabilities. Vulnerability Insight: Flaws are due to the way SOAP parser process certain SOAP objects (due to allowed expansion of XML external entities during SOAP WSDL files parsing). Vulnerability Impact: Successful exploitation will allow remote attackers to obtain sensitive information. Affected Software/OS: PHP version before 5.3.22 and 5.4.x before 5.4.12 Solution: Update to PHP 5.3.22 or 5.4.12 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1824 APPLE-SA-2013-09-12-1 http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=188c196d4da60bdde9190d2fc532650d17f7af2d http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=afe98b7829d50806559acac9b530acb8283c3bf4 http://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-1824.html http://support.apple.com/kb/HT5880 https://bugzilla.redhat.com/show_bug.cgi?id=918187
Copyright	Copyright (C) 2013 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.