It was discovered that PHP did not properly enforce php_admin_value and php_admin_flag restrictions in the Apache configuration file. A local attacker could create a specially crafted PHP script that would bypass intended security restrictions. This issue only applied to Ubuntu 6.06 LTS, 7.10, and 8.04 LTS. (CVE-2007-5900)

It was discovered that PHP did not correctly handle certain malformed font files. If a PHP application were tricked into processing a specially crafted font file, an attacker may be able to cause a denial of service and possibly execute arbitrary code with application privileges. (CVE-2008-3658)

It was discovered that PHP did not properly check the delimiter argument to the explode function. If a script passed untrusted input to the explode function, an attacker could cause a denial of service and possibly execute arbitrary code with application privileges.
(CVE-2008-3659) 

It was discovered that PHP, when used as FastCGI module, did not properly sanitize requests. By performing a request with multiple dots preceding the extension, an attacker could cause a denial of service.
(CVE-2008-3660)

It was discovered that PHP did not properly handle Unicode conversion in the mbstring extension. If a PHP application were tricked into processing a specially crafted string containing an HTML entity, an attacker could execute arbitrary code with application privileges.
(CVE-2008-5557)

It was discovered that PHP did not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function.
An attacker could exploit this issue to bypass safe_mode restrictions.
(CVE-2008-5624)

It was dicovered that PHP did not properly enforce error_log safe_mode restrictions when set by php_admin_flag in the Apache configuration file. A local attacker could create a specially crafted PHP script that would overwrite arbitrary files. (CVE-2008-5625)

It was discovered that PHP contained a flaw in the ZipArchive::extractTo function. If a PHP application were tricked into processing a specially crafted zip file that had filenames containing '..', an attacker could write arbitrary files within the filesystem.
This issue only applied to Ubuntu 7.10, 8.04 LTS, and 8.10.
(CVE-2008-5658)

USN-557-1 fixed a vulnerability in the GD library. When using the GD library, PHP did not properly handle the return codes that were added in the security update. An attacker could exploit this issue with a specially crafted image file and cause PHP to crash, leading to a denial of service. This issue only applied to Ubuntu 6.06 LTS, and 7.10. (CVE-2007-3996).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the version of PHP installed on the remote host is older than 5.2.5.  Such versions may be affected by various issues, including but not limited to several buffer overflows.

バナーによると、リモートホストにインストールされている PHP のバージョンは 5.2.5 より前です。このようなバージョンは、いくつかのバッファオーバーフローを含むがそれらに限定されない、さまざまな問題の影響を受けることがあります。

根據其標題，遠端主機上安裝的 PHP 版本舊於 5.2.5。這些版本可能受到多個問題影響，包括但不限於一些緩衝區溢位。

根据其标题，远程主机上安装的 PHP 版本早于 5.2.5。此类版本可能会受到各种问题的影响，包括但不限于多个缓冲区溢出。

ID	Name	Product	Family	Published	Updated	Severity
36665	Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : php5 vulnerabilities (USN-720-1)	Nessus	Ubuntu Local Security Checks	4/23/2009	1/19/2021	critical
28181	PHP < 5.2.5 Multiple Vulnerabilities	Nessus	CGI abuses	11/12/2007	5/28/2024	medium
28181	PHP < 5.2.5 の複数の脆弱性	Nessus	CGI abuses	11/12/2007	5/28/2024	medium
28181	PHP < 5.2.5 多種弱點	Nessus	CGI abuses	11/12/2007	5/28/2024	medium
28181	PHP < 5.2.5 多种漏洞	Nessus	CGI abuses	11/12/2007	5/28/2024	medium

Detections

Analytics

Plugins Search

critical

medium

medium

medium

medium