Test ID:	1.3.6.1.4.1.25623.1.0.804820
Category:	Web application abuses
Title:	PHP Multiple Vulnerabilities - 01 (Aug 2014)
Summary:	PHP is prone to multiple vulnerabilities.
Description:	Summary: PHP is prone to multiple vulnerabilities. Vulnerability Insight: The flaws exist due to: - Multiple overflow conditions in the 'php_parserr' function within ext/standard/dns.c script. - Integer overflow in the 'cdf_read_property_info' function in cdf.c within the Fileinfo component. - An error in the '_php_image_output_ctx' function within ext/gd/gd_ctx.c script as NULL bytes in paths to various image handling functions are not stripped. Vulnerability Impact: Successful exploitation will allow remote attackers to overwrite arbitrary files, conduct denial of service attacks or potentially execute arbitrary code. Affected Software/OS: PHP version 5.4.x before 5.4.32 and 5.5.x before 5.5.16 Solution: Update to PHP version 5.4.32 or 5.5.16 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3597 http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html BugTraq ID: 69322 http://www.securityfocus.com/bid/69322 Debian Security Information: DSA-3008 (Google Search) http://www.debian.org/security/2014/dsa-3008 RedHat Security Advisories: RHSA-2014:1326 http://rhn.redhat.com/errata/RHSA-2014-1326.html RedHat Security Advisories: RHSA-2014:1327 http://rhn.redhat.com/errata/RHSA-2014-1327.html RedHat Security Advisories: RHSA-2014:1765 http://rhn.redhat.com/errata/RHSA-2014-1765.html RedHat Security Advisories: RHSA-2014:1766 http://rhn.redhat.com/errata/RHSA-2014-1766.html http://secunia.com/advisories/60609 http://secunia.com/advisories/60696 SuSE Security Announcement: openSUSE-SU-2014:1133 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html SuSE Security Announcement: openSUSE-SU-2014:1245 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-09/msg00055.html http://www.ubuntu.com/usn/USN-2344-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-3587 BugTraq ID: 69325 http://www.securityfocus.com/bid/69325 Debian Security Information: DSA-3021 (Google Search) http://www.debian.org/security/2014/dsa-3021 RedHat Security Advisories: RHSA-2016:0760 http://rhn.redhat.com/errata/RHSA-2016-0760.html http://www.ubuntu.com/usn/USN-2369-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-5120
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.