Detections
Analytics
PHP < 5.3.11 Multiple Vulnerabilities
high Nessus Network Monitor Plugin ID 6995
Synopsis
The remote web server uses a version of PHP that is affected by multiple vulnerabilities.Description
PHP versions earlier than 5.3.11 are affected by the following vulnerabilities :- During the import of environment variables, temporary changes to the 'magic_quotes_gpc' directive are not handled properly. This can lower the difficulty for SQL injection attacks. (CVE-2012-0831)
- The '$_FILES' variable can be corrupted because the names of uploaded files are not properly validated. (CVE-2012-1172)
- The 'open_basedir' directive is not properly handled by the functions 'readline_write_history' and 'readline_read_history'.
- The 'header()' function does not detect multi-line headers with a CR. (Bug #60227 / CVE-2011-1398)
Solution
Upgrade to PHP version 5.3.11 or later.See Also
http://www.php.net/archive/2012.php#id2012-04-26-1
http://www.nessus.org/u?e81d4026
https://bugs.php.net/bug.php?id=61043
https://bugs.php.net/bug.php?id=54374
Plugin Details
Severity: High
ID: 6995
Family: Web Servers
Published: 8/20/2013
Updated: 3/6/2019
Nessus ID: 58966
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 6.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:php:php
Patch Publication Date: 4/26/2012
Vulnerability Publication Date: 2/9/2012