Test ID:	1.3.6.1.4.1.25623.1.0.804849
Category:	Web application abuses
Title:	PHP Information Disclosure Vulnerability - 01 (Sep 2014)
Summary:	PHP is prone to an information disclosure vulnerability.;; This VT has been deprecated and merged into the VTs 'PHP Multiple Vulnerabilities (Jun/Aug 2014) - Linux' (OID:; 1.3.6.1.4.1.25623.1.0.809736) and 'PHP Multiple Vulnerabilities (Jun/Aug 2014) - Windows' (OID:; 1.3.6.1.4.1.25623.1.0.809735).
Description:	Summary: PHP is prone to an information disclosure vulnerability. This VT has been deprecated and merged into the VTs 'PHP Multiple Vulnerabilities (Jun/Aug 2014) - Linux' (OID: 1.3.6.1.4.1.25623.1.0.809736) and 'PHP Multiple Vulnerabilities (Jun/Aug 2014) - Windows' (OID: 1.3.6.1.4.1.25623.1.0.809735). Vulnerability Insight: The flaw is due to an error in the 'hp_print_info' function within /ext/standard/info.c script. Vulnerability Impact: Successful exploitation will allow a local attacker to gain access to sensitive information. Affected Software/OS: PHP before version 5.3.x before 5.3.29, 5.4.x before 5.4.30, 5.5.x before 5.5.14 Solution: Update to PHP version 5.3.29 or 5.4.30 or 5.5.14 or later. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4721 Debian Security Information: DSA-2974 (Google Search) http://www.debian.org/security/2014/dsa-2974 http://twitter.com/mikispag/statuses/485713462258302976 https://www.sektioneins.de/en/blog/14-07-04-phpinfo-infoleak.html RedHat Security Advisories: RHSA-2014:1765 http://rhn.redhat.com/errata/RHSA-2014-1765.html RedHat Security Advisories: RHSA-2014:1766 http://rhn.redhat.com/errata/RHSA-2014-1766.html http://secunia.com/advisories/54553 http://secunia.com/advisories/59794 http://secunia.com/advisories/59831 SuSE Security Announcement: openSUSE-SU-2014:0945 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html SuSE Security Announcement: openSUSE-SU-2014:1236 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.