According to its banner, the version of PHP 5.6.x installed on the remote host is prior to 5.6.6. It is, therefore, affected by multiple vulnerabilities :

  - A heap-based buffer overflow flaw in the     enchant_broker_request_dict function in     ext/enchant/enchant.c could allow a remote attacker     to cause a buffer overflow, resulting in     a denial of service condition or the execution of     arbitrary code. (CVE-2014-9705)

  - A heap-based buffer overflow flaw in the GNU C Library     (glibc) due to improperly validating user-supplied input     in the glibc functions __nss_hostname_digits_dots(),     gethostbyname(), and gethostbyname2(). This allows a     remote attacker to cause a buffer overflow, resulting in     a denial of service condition or the execution of     arbitrary code. (CVE-2015-0235)

  - A use-after-free flaw exists in the function     php_date_timezone_initialize_from_hash() within the     'ext/date/php_date.c' script. An attacker can exploit     this to access sensitive information or crash     applications linked to PHP. (CVE-2015-0273)

  - A use-after-free vulnerability in the     phar_rename_archive function in phar_object.c could     allow a remote attacker to cause a denial of service.
    (CVE-2015-2301)

  - An XML External Entity (XXE) flaw exists in the PHP-FPM     component due to improper parsing of XML data. A remote     attacker can exploit this, via specially crafted XML     data, to disclose sensitive information or cause a     denial of service. (CVE-2015-8866)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

PHP 5.6.x < 5.6.6 Multiple Vulnerabilities (GHOST)

critical Nessus Plugin ID 81512

Version 1.22