According to its banner, the version of PHP running on the remote host is 5.5.x prior to 5.5.31 or 5.6.x prior to 5.6.17. It is, therefore, affected by multiple vulnerabilities :

  - An out-of-bounds read error exists in the     gdImageRotateInterpolated() function in file     gd_interpolation.c when handling background colors.
    A remote attacker can exploit this to disclose memory     contents or crash the application. (CVE-2016-1903)

  - An unspecified flaw exists in file fpm_log.c in the     fpm_log_write() function when handling very long     HTTP requests. A local attacker can exploit this to     obtain sensitive information, via access to the     access log file. (CVE-2016-5114)

  - A use-after-free error exists in file wddx.c in the     php_wddx_pop_element() function when handling WDDX     packet deserialization. A remote attacker can exploit     this, by dereferencing already freed memory, to execute     arbitrary code.

  - A type confusion flaw exists in file xmlrpc-epi-php.c     in the PHP_to_XMLRPC_worker() function. A remote     attacker can exploit this to disclose memory contents,     crash the application process, or have other impact.

  - A type confusion flaw exists in file wddx.c when     handling WDDX packet deserialization. A remote attacker     can exploit this to execute arbitrary code.

  - A flaw exists in file lsapilib.c when handling requests     due to the LSAPI module failing to clear its secrets in     child processes. A remote attacker can exploit this to     gain access to memory contents, resulting in the     disclosure of sensitive information.

  - A flaw exists in file lsapilib.c in the parseRequest()     function due to a failure to properly sanitize input     passed through multiple, unspecified parameters. A     remote attacker can exploit this to cause a denial of     service.

Detections

Analytics

PHP prior to 5.5.x < 5.5.31 / 5.6.x < 5.6.17 Multiple Vulnerabilities

critical Nessus Plugin ID 88679

Version 1.18