According to its banner, the version of PHP 5.6.x installed on the remote host is prior to 5.6.6. It is, therefore, affected by multiple vulnerabilities :

  - A heap-based buffer overflow flaw in the     enchant_broker_request_dict function in     ext/enchant/enchant.c could allow a remote attacker     to cause a buffer overflow, resulting in     a denial of service condition or the execution of     arbitrary code. (CVE-2014-9705)

  - A heap-based buffer overflow flaw in the GNU C Library     (glibc) due to improperly validating user-supplied input     in the glibc functions __nss_hostname_digits_dots(),     gethostbyname(), and gethostbyname2(). This allows a     remote attacker to cause a buffer overflow, resulting in     a denial of service condition or the execution of     arbitrary code. (CVE-2015-0235)

  - A use-after-free flaw exists in the function     php_date_timezone_initialize_from_hash() within the     'ext/date/php_date.c' script. An attacker can exploit     this to access sensitive information or crash     applications linked to PHP. (CVE-2015-0273)

  - A use-after-free vulnerability in the     phar_rename_archive function in phar_object.c could     allow a remote attacker to cause a denial of service.
    (CVE-2015-2301)

  - An XML External Entity (XXE) flaw exists in the PHP-FPM     component due to improper parsing of XML data. A remote     attacker can exploit this, via specially crafted XML     data, to disclose sensitive information or cause a     denial of service. (CVE-2015-8866)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

PHP 5.6.x < 5.6.6 Multiple Vulnerabilities (GHOST)

critical Nessus Plugin ID 81512

Version 1.23

Version 1.22

Version 1.23 Nov 22, 2024, 4:32 PM Plugin metadata (remove script_exclude_keys for CGI scanning) Plugin Feed: 202411221632
Version 1.22 May 31, 2024, 10:02 AM Required Scan configuration ("Enable cgi scanning" set to "True") Plugin Feed: 202405311002