According to its banner, the version of PHP running on the remote web server is 5.4.x prior to 5.4.44. It is, therefore, affected by multiple vulnerabilities:

  - Multiple use-after-free vulnerabilities exist in the SPL     component, due to improper handling of a specially     crafted serialized object. An unauthenticated, remote     attack can exploit this, via vectors involving     ArrayObject, splObjectStorage and SplDoublyLinkedList to     execute arbitrary code. (CVE-2015-6831)

  - A use-after-free vulnerability exists in     ext/spl/spl_array.c due to improper handling of a     specially crafted serialized data. An unauthenticated,     remote attacker can exploit this via specially crafted     serialized data that triggers misuse of an array field     to execute arbitrary code. (CVE-2015-6832)

  - A directory traversal vulnerability exists in the     PharData class, due to improper implementation of the     exctractTo function. An unauthenticated, remote attacker     can exploit this via a crafted ZIP archive entry to     write to arbitrary files. (CVE-2015-6833)

  - The openssl_random_pseudo_bytes() function in file     openssl.c does not generate sufficiently random numbers.
    An unauthenticated, remote attacker can exploit this to     defeat cryptographic protection mechanisms.
    (CVE-2015-8867)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

PHP 5.4.x < 5.4.44 Multiple Vulnerabilities

high Nessus Plugin ID 85298

Version 1.15

Version 1.14

Version 1.15 Nov 22, 2024, 4:32 PM Plugin metadata (remove script_exclude_keys for CGI scanning) Plugin Feed: 202411221632
Version 1.14 May 28, 2024, 5:14 PM Required Scan configuration ("Enable cgi scanning" set to "True") Plugin Feed: 202405281714