Detections
Analytics
PHP < 5.0.2 Open Bracket Memory Disclosure
medium Nessus Network Monitor Plugin ID 2354
Synopsis
The remote host may give an attacker information useful for future attacks.Description
The remote host is running a version of PHP that is older than 5.0.2. This version has a bug that allows an attacker to insert an arbitrary value into an array. When the PHP parser handles the array, it may leak memory information back to the web client. A successful attacker would be able to retrieve information from the server that is potentially confidential in nature.Solution
Upgrade to PHP 5.0.2 or higher.See Also
Plugin Details
Severity: Medium
ID: 2354
Family: Web Servers
Published: 1/8/2005
Updated: 3/6/2019
Nessus ID: 15436
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 5.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:php:php
Patch Publication Date: 10/13/2004
Vulnerability Publication Date: 11/3/2004
Reference Information
CVE: CVE-2004-0958
BID: 11334