The sscanf() function did not properly check array boundaries. In applications which use sscanf() with argument swapping, a remote attacker could potentially exploit this to crash the affected web application or even execute arbitrary code with the application's privileges. (CVE-2006-4020)

The file_exists() and imap_reopen() functions did not perform proper open_basedir and safe_mode checks which could allow local scripts to bypass intended restrictions. (CVE-2006-4481)

On 64 bit systems the str_repeat() and wordwrap() functions did not properly check buffer boundaries. Depending on the application, this could potentially be exploited to execute arbitrary code with the applications' privileges. This only affects the amd64 and sparc platforms. (CVE-2006-4482)

A buffer overflow was discovered in the LWZReadByte_() function of the GIF image file parser. By tricking a PHP application into processing a specially crafted GIF image, a remote attacker could exploit this to execute arbitrary code with the application's privileges.
(CVE-2006-4484).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server.

A response-splitting issue was discovered in the PHP session handling.
If a remote attacker can force a carefully crafted session identifier to be used, a cross-site-scripting or response-splitting attack could be possible. (CVE-2006-3016)

A buffer overflow was discovered in the PHP sscanf() function. If a script used the sscanf() function with positional arguments in the format string, a remote attacker sending a carefully crafted request could execute arbitrary code as the 'apache' user. (CVE-2006-4020)

An integer overflow was discovered in the PHP wordwrap() and str_repeat() functions. If a script running on a 64-bit server used either of these functions on untrusted user data, a remote attacker sending a carefully crafted request might be able to cause a heap overflow. (CVE-2006-4482)

A buffer overflow was discovered in the PHP gd extension. If a script was set up to process GIF images from untrusted sources using the gd extension, a remote attacker could cause a heap overflow.
(CVE-2006-4484)

An integer overflow was discovered in the PHP memory allocation handling. On 64-bit platforms, the 'memory_limit' setting was not enforced correctly, which could allow a denial of service attack by a remote user. (CVE-2006-4486)

Users of PHP should upgrade to these updated packages which contain backported patches to correct these issues. These packages also contain a fix for a bug where certain input strings to the metaphone() function could cause memory corruption.

バナーによると、リモートホストにインストールされているPHP 5.xのバージョンは5.1.5より前です。このようなバージョンは、以下の脆弱性の影響を受ける可能性があります：

  - PHP の c-client ライブラリ 2000、2001、または 2004 は、safe_mode 関数または open_basedir 関数を確認しません。
    （CVE-2006-1017）

  - sscanf 関数にバッファオーバーフローがあります。
    （CVE-2006-4020）

  - file_existsおよびimap_reopen関数が、safe_modeおよびopen_basedir settingsをチェックしないために、ローカルユーザーが設定をバイパスする可能性があります。（CVE-2006-4481）

  - ext/standard/string.cの中のstr_repeatおよびwordwrap関数に、複数のヒープベースのバッファオーバーフローが存在します。（CVE-2006-4482）

  - open_basedirまたはsafe_modeを有効にした際に、cURL拡張ファイルによりCURLOPT_FOLLOWLOCATIONオプションが許可され、攻撃者が認証されていない操作を実行する可能性があります。（CVE-2006-4483）

  - GD拡張のext/gd/libgd/gd_gif_in.cのLWZReadByte_関数に、バッファオーバーフローの脆弱性が存在します。（CVE-2006-4484）

  - stripos関数が領域外読み取りの影響を受けます。（CVE-2006-4485）

セキュリティ問題を修正する更新済みの PHP パッケージが、現在利用可能です。

Red Hat セキュリティレスポンスチームは、この更新に重大なセキュリティインパクトがあると評価しています。

PHP は、Apache HTTP Web サーバーで一般的に使用される、 HTML を組み込んだスクリプト言語です。

PHP のユーザーは、バックポートされたパッチが含まれるこれらの更新済みパッケージへアップグレードし、これらの問題を修正する必要があります。これらのパッケージには、metaphone() 関数への特定の入力文字列によりメモリ破損が発生させる可能性のあるバグの修正も含まれます。


Red Hat セキュリティアドバイザリ 2006:0730 から：

Hardened-PHP Project は、PHP htmlentities() および htmlspecialchars() ルーチンでオーバーフローを発見しました。PHP スクリプトが脆弱な関数を使用して、UTF-8 データを解析する場合、リモートの攻撃者が特別に細工されたリクエストを送信することで、オーバーフローを発生させ、おそらくは「apache」ユーザーとして任意のコードを実行する可能性があります。
(CVE-2006-5465)


Red Hat セキュリティアドバイザリ 2006:0669 から：

応答分割問題が、PHP セッション処理で発見されました。
リモートの攻撃者が、入念に細工されたセッション識別子の使用を強制できる場合、クロスサイトスクリプティングまたは応答分割攻撃が実行される可能性があります。(CVE-2006-3016)

PHP sscanf() 関数でバッファオーバーフローが発見されました。スクリプトで書式文字列に位置引数がある sscanf() 関数を使用する場合は、リモートの攻撃者が入念に細工したリクエストを送信することで、「apache」ユーザーとして任意のコードを実行する可能性があります。(CVE-2006-4020)

PHP wordwrap() および str_repeat() の関数で整数オーバーフローが発見されました。64 ビットサーバーで実行されているスクリプトで、信頼できないユーザーデータにこれらの関数のいずれかが使用される場合は、リモートの攻撃者が入念に細工されたリクエストを送信することで、ヒープオーバーフローを発生させる可能性があります。(CVE-2006-4482)

PHP の gd 拡張でバッファオーバーフローが発見されました。gd 拡張を使用する信頼できないソースからの GIF 画像を処理するためにスクリプトが設定された場合は、リモートの攻撃者がヒープオーバーフローを発生させる可能性があります。
(CVE-2006-4484)

PHP のメモリ割り当て処理で、整数オーバーフローが発見されました。64 ビットプラットフォームで、「memory_limit」設定が正しく施行されないために、リモートの攻撃者が DoS 攻撃（サービス拒否攻撃）を実行する可能性がありました。(CVE-2006-4486)

更新后的 PHP 程序包修复了一个安全问题，现在可用。

Red Hat 安全响应团队将此更新评级为具有重要安全影响。

PHP 是一种嵌入了 HTML 的脚本语言，通常用于 Apache HTTP Web 服务器。

PHP 用户应升级这些更新后的程序包，其中包含用于修正这些问题的向后移植的修补程序。这些程序包还包含针对 metaphone() 函数的某些输入字符串可造成内存损坏这一缺陷的补丁。


来自 Red Hat 安全公告 2006:0730：

Hardened-PHP 项目在 PHP htmlentities() 和 htmlspecialchars() 例程中发现一处溢出。如果 PHP 脚本使用易受攻击的函数解析 UTF-8 数据，则远程攻击者可通过发送精心构建的请求来触发此溢出并可能作为“apache”用户执行任意代码。
(CVE-2006-5465)


来自 Red Hat 安全公告 2006:0669：

在 PHP 会话处理中发现一个响应拆分问题。
如果远程攻击者可强制使用精心构建的会话标识符，则可能执行跨站脚本或响应拆分攻击。(CVE-2006-3016)

在 PHP sscanf() 函数中发现缓冲区溢出。如果脚本使用的 sscanf() 函数在格式字符串中包含位置参数，则远程攻击者可能通过发送精心构建的请求，以“apache”用户身份执行任意代码。(CVE-2006-4020)

在 PHP wordwrap() 和 str_repeat() 函数中发现整数溢出。如果在 64 位服务器上运行的脚本对不受信任的用户数据使用这两个函数，则远程攻击者可能通过发送精心构建的请求造成堆溢出。(CVE-2006-4482)

在 PHP gd 扩展中发现缓冲区溢出。如果脚本设置为使用 gd 扩展处理来自不受信任的源的 GIF 图像，则远程攻击者可能造成堆溢出。
(CVE-2006-4484)

在 PHP 内存分配处理中发现整数溢出。在 64 位平台上未正确强制执行“memory_limit”设置，这可能允许远程用户执行拒绝服务攻击。(CVE-2006-4486)

根据其标题，远程主机上安装的 PHP 5.x 版本早于 5.1.5。这些版本可能受到以下漏洞影响：

- 用于 PHP 的 c-client 库 2000、2001 或 2004 不会检查 safe_mode 或 open_basedir 函数。
 (CVE-2006-1017)

- sscanf 函数中存在缓冲区溢出。
 (CVE-2006-4020)

- file_exists 和 imap_reopen 函数未检查 safe_mode 和 open_basedir 设置，这可允许本地用户绕过设置。(CVE-2006-4481)

- ext/standard/string.c 的 str_repeat 和 wordwrap 函数中存在多个基于堆的缓冲区溢出。(CVE-2006-4482)

- 在 open_basedir 或 safe_mode 已启用的情况下 cURL 扩展文件允许 CURLOPT_FOLLOWLOCATION 选项，这可允许攻击者执行未经授权的操作。(CVE-2006-4483)

- 在 GD 扩展内，ext/gd/libgd/gd_gif_in.c 的 LWZReadByte_ 函数中存在一个缓冲区溢出漏洞。(CVE-2006-4484)

- stripos 函数受到一个越界读取错误影响。(CVE-2006-4485)

現已提供更新版 PHP 套件，可修正一個安全性問題。

Red Hat 安全性回應團隊已將此更新評等為具有重要安全性影響。

PHP 是一種內嵌 HTML 的指令碼語言，通常用於 Apache HTTP Web 伺服器。

PHP 使用者應升級至這些更新版套件，其中包含可更正這些問題的反向移植修補程式。這些套件也包含一個錯誤的修正，該錯誤會導致 metaphone() 函式的某些輸入字串可造成記憶體損毀。


來自 Red Hat 安全性公告 2006:0730：

Hardened-PHP Project 發現 PHP htmlentities() 和 htmlspecialchars() 常式中有一個溢位。如果 PHP 指令碼使用有弱點的函式剖析 UTF-8 資料，遠端攻擊者便可藉由傳送特製的要求來觸發溢位，且可能以 'apache' 使用者身分執行任意程式碼。
(CVE-2006-5465)


來自 Red Hat 安全性公告 2006:0669：

在 PHP 工作階段處理中發現一個回應分割問題。
如果遠端攻擊者可強制使用特製的工作階段識別碼，就可能發生跨網站指令碼或回應分割攻擊。(CVE-2006-3016)

在 PHP sscanf() 函式中發現一個緩衝區溢位。如果指令碼使用格式字串中包含位置引數的 sscanf() 函式，遠端攻擊者便可傳送特製的要求，藉此以 'apache' 使用者身分執行任意程式碼。(CVE-2006-4020)

在 PHP wordwrap() 和 str_repeat() 函式中發現一個整數溢位。如果在 64 位元伺服器上執行的指令碼對未受信任的使用者資料使用上述任一函式，遠端攻擊者便或許可以藉由傳送特製要求來造成堆積溢位。(CVE-2006-4482)

在 PHP gd 延伸模組中發現一個緩衝區溢位。如果指令碼設為使用 gd 延伸模組處理來自未受信任來源的 GIF 影像，遠端攻擊者便可造成堆積溢位。
(CVE-2006-4484)

在 PHP 記憶體配置處理中發現一個整數溢位。在 64 位元平台上，未正確強制執行 'memory_limit' 設定，這可允許遠端使用者發動拒絕服務攻擊。(CVE-2006-4486)

根據其標題，遠端主機上安裝的 PHP 5.x 版本比 5.1.5 舊。這些版本可能受到以下弱點影響：

- PHP 版 c-client 程式庫 2000、2001 或 2004 未檢查 safe_mode 或 open_basedir 函式。
 (CVE-2006-1017)

- sscanf 函式中存在一個緩衝區溢位問題。
 (CVE-2006-4020)

- file_exists 和 imap_reopen 函式未檢查 safe_mode 和 open_basedir 設定，這可允許本機使用者繞過設定。(CVE-2006-4481)

- ext/standard/string.c 的 str_repeat 和 wordwrap 函式中存在多個堆積型緩衝區溢位問題。(CVE-2006-4482)

- 在 open_basedir 或 safe_mode 已啟用的情況下，cURL 延伸模組檔案允許 CURLOPT_FOLLOWLOCATION 選項，這可允許攻擊者執行未經授權的動作。(CVE-2006-4483)

- 在 GD 延伸模組內，ext/gd/libgd/gd_gif_in.c 的 LWZReadByte_ 函式中存在一個緩衝區溢位弱點。(CVE-2006-4484)

- stripos 函式受到一個超出邊界讀取錯誤影響。(CVE-2006-4485)

Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 2.1.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server.

A response-splitting issue was discovered in the PHP session handling.
If a remote attacker can force a carefully crafted session identifier to be used, a cross-site-scripting or response-splitting attack could be possible. (CVE-2006-3016)

A buffer overflow was discovered found in the PHP sscanf() function.
If a script used the sscanf() function with positional arguments in the format string, a remote attacker sending a carefully crafted request could execute arbitrary code as the 'apache' user.
(CVE-2006-4020)

An integer overflow was discovered in the PHP wordwrap() and str_repeat() functions. If a script running on a 64-bit server used either of these functions on untrusted user data, a remote attacker sending a carefully crafted request might be able to cause a heap overflow. (CVE-2006-4482)

An integer overflow was discovered in the PHP memory allocation handling. On 64-bit platforms, the 'memory_limit' setting was not enforced correctly, which could allow a denial of service attack by a remote user. (CVE-2006-4486)

Users of PHP should upgrade to these updated packages which contain backported patches to correct these issues. These packages also contain a fix for a bug where certain input strings to the metaphone() function could cause memory corruption.

According to its banner, the version of PHP 5.x installed on the remote host is older than 5.1.5.  Such versions may be affected by the following vulnerabilities :

  - The c-client library 2000, 2001, or 2004 for PHP does     not check the safe_mode or open_basedir functions.
    (CVE-2006-1017)

  - A buffer overflow exists in the sscanf function.
    (CVE-2006-4020)

  - The file_exists and imap_reopen functions do not check     for the safe_mode and open_basedir settings, which     allows local users to bypass the settings.     (CVE-2006-4481)

  - Multiple heap-based buffer overflows exist in the     str_repeat and wordwrap functions in     ext/standard/string.c. (CVE-2006-4482)

  - The cURL extension files permit the     CURLOPT_FOLLOWLOCATION option when open_basedir or     safe_mode is enabled, which allows attackers to perform     unauthorized actions. (CVE-2006-4483)

  - A buffer overflow vulnerability exists in the     LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the     GD extension. (CVE-2006-4484)

  - The stripos function is affected by an out-of-bounds     read. (CVE-2006-4485)

Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2005-3353     Tim Starling discovered that missing input sanitising in     the EXIF module could lead to denial of service.

  - CVE-2006-3017     Stefan Esser discovered a security-critical programming     error in the hashtable implementation of the internal     Zend engine.

  - CVE-2006-4482     It was discovered that str_repeat() and wordwrap()     functions perform insufficient checks for buffer     boundaries on 64 bit systems, which might lead to the     execution of arbitrary code.

  - CVE-2006-5465     Stefan Esser discovered a buffer overflow in the     htmlspecialchars() and htmlentities(), which might lead     to the execution of arbitrary code.

Updated PHP packages that fix a security issue are now available. 

This update has been rated as having important security impact by the Red Hat Security Response Team. 

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. 

Users of PHP should upgrade to these updated packages which contain backported patches to correct these issues.  These packages also contain a fix for a bug where certain input strings to the metaphone() function could cause memory corruption. 


From Red Hat Security Advisory 2006:0730 :

The Hardened-PHP Project discovered an overflow in the PHP htmlentities() and htmlspecialchars() routines. If a PHP script used the vulnerable functions to parse UTF-8 data, a remote attacker sending a carefully crafted request could trigger the overflow and potentially execute arbitrary code as the 'apache' user.
(CVE-2006-5465)


From Red Hat Security Advisory 2006:0669 :

A response-splitting issue was discovered in the PHP session handling.
If a remote attacker can force a carefully crafted session identifier to be used, a cross-site-scripting or response-splitting attack could be possible. (CVE-2006-3016)

A buffer overflow was discovered in the PHP sscanf() function. If a script used the sscanf() function with positional arguments in the format string, a remote attacker sending a carefully crafted request could execute arbitrary code as the 'apache' user. (CVE-2006-4020)

An integer overflow was discovered in the PHP wordwrap() and str_repeat() functions. If a script running on a 64-bit server used either of these functions on untrusted user data, a remote attacker sending a carefully crafted request might be able to cause a heap overflow. (CVE-2006-4482)

A buffer overflow was discovered in the PHP gd extension. If a script was set up to process GIF images from untrusted sources using the gd extension, a remote attacker could cause a heap overflow.
(CVE-2006-4484)

An integer overflow was discovered in the PHP memory allocation handling. On 64-bit platforms, the 'memory_limit' setting was not enforced correctly, which could allow a denial of service attack by a remote user. (CVE-2006-4486)

The PHP development team reports :

- Added missing safe_mode/open_basedir checks inside the error_log(), file_exists(), imap_open() and imap_reopen() functions.

- Fixed overflows inside str_repeat() and wordwrap() functions on 64bit systems.

- Fixed possible open_basedir/safe_mode bypass in cURL extension and with realpath cache.

- Fixed overflow in GD extension on invalid GIF images.

- Fixed a buffer overflow inside sscanf() function.

- Fixed an out of bounds read inside stripos() function.

- Fixed memory_limit restriction on 64 bit system.

Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function. One instance in gd_io_dp.c does not appear to be corrected in the embedded copy of GD used in php to build the php-gd package. (CVE-2004-0941)

Integer overflows were reported in the GD Graphics Library (libgd) 2.0.28, and possibly other versions. These overflows allow remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx() function.
PHP, as packaged in Mandriva Linux, contains an embedded copy of the GD library, used to build the php-gd package. (CVE-2004-0990)

The c-client library 2000, 2001, or 2004 for PHP 3.x, 4.x, and 5.x, when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote attackers to obtain access to an IMAP stream data structure and conduct unauthorized IMAP actions. (CVE-2006-1017)

Integer overflow in the wordwrap function in string.c in might allow context-dependent attackers to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, which triggers a heap-based buffer overflow in a memcpy function call, a different vulnerability than CVE-2002-1396. (CVE-2006-1990) The previous update for this issue did not resolve the issue on 64bit platforms.

The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing nul characters. (CVE-2006-2563)

Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from being appended to the filename. (CVE-2006-2660)

The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers to cause a denial of service (CPU consumption) via malformed GIF data that causes an infinite loop. PHP, as packaged in Mandriva Linux, contains an embedded copy of the GD library, used to build the php-gd package. (CVE-2006-2906)

The error_log function in PHP allows local users to bypass safe mode and open_basedir restrictions via a 'php://' or other scheme in the third argument, which disables safe mode. (CVE-2006-3011)

An unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to 'certain characters in session names', including special characters that are frequently associated with CRLF injection, SQL injection, and cross-site scripting (XSS) vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().
(CVE-2006-3016)

An unspecified vulnerability in PHP before 5.1.3 can prevent a variable from being unset even when the unset function is called, which might cause the variable's value to be used in security-relevant operations. (CVE-2006-3017)

An unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unkown impact and attack vectors related to heap corruption. (CVE-2006-3018)

Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990. (CVE-2006-4482)

The cURL extension files (1) ext/curl/interface.c and (2) ext/curl/streams.c in PHP before 5.1.5 permit the CURLOPT_FOLLOWLOCATION option when open_basedir or safe_mode is enabled, which allows attackers to perform unauthorized actions, possibly related to the realpath cache. (CVE-2006-4483)

Unspecified vulnerability in PHP before 5.1.6, when running on a 64-bit system, has unknown impact and attack vectors related to the memory_limit restriction. (CVE-2006-4486)

The GD related issues (CVE-2004-0941, CVE-2004-0990, CVE-2006-2906) affect only Corporate 3 and Mandrake Network Firewall 2.

The php-curl issues (CVE-2006-2563, CVE-2006-4483) affect only Mandriva 2006.0.

Updated packages have been patched to address all these issues. Once these packages have been installed, you will need to restart Apache (service httpd restart) in order for the changes to take effect.

The remote host is running a version of PHP that is older than 4.4.4 or 5.1.5.  This version is reported vulnerable to several flaws that may allow an attacker with the right to execute PHP scripts the ability to execute arbitrary code.  Executed code would be run with the permissions of the web server process. 

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
27921	Ubuntu 5.04 / 5.10 / 6.06 LTS : php4, php5 vulnerabilities (USN-342-1)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	high
22443	RHEL 3 / 4 : php (RHSA-2006:0669)	Nessus	Red Hat Local Security Checks	2006/9/22	2021/1/14	high
17713	PHP 5.1.x < 5.1.5の複数の脆弱性	Nessus	CGI abuses	2011/11/18	2025/5/26	critical
67421	Oracle Linux 4：php（ELSA-2006-0730 / ELSA-2006-0669）	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
67421	Oracle Linux 4：php (ELSA-2006-0730 / ELSA-2006-0669)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
17713	PHP 5.1.x < 5.1.5 多种漏洞	Nessus	CGI abuses	2011/11/18	2025/5/26	critical
67421	Oracle Linux 4 : php (ELSA-2006-0730 / ELSA-2006-0669)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
17713	PHP 5.1.x < 5.1.5 多個弱點	Nessus	CGI abuses	2011/11/18	2025/5/26	critical
22444	RHEL 2.1 : php (RHSA-2006:0682)	Nessus	Red Hat Local Security Checks	2006/9/22	2021/1/14	high
17713	PHP 5.1.x < 5.1.5 Multiple Vulnerabilities	Nessus	CGI abuses	2011/11/18	2025/5/26	critical
22423	CentOS 3 / 4 : php (CESA-2006:0669)	Nessus	CentOS Local Security Checks	2006/9/22	2021/1/4	high
23655	Debian DSA-1206-1 : php4 - several vulnerabilities	Nessus	Debian Local Security Checks	2006/11/20	2021/1/4	high
67421	Oracle Linux 4 : php (ELSA-2006-0730 / ELSA-2006-0669)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
22343	FreeBSD : php -- multiple vulnerabilities (ea09c5df-4362-11db-81e1-000e0c2e438a)	Nessus	FreeBSD Local Security Checks	2006/9/14	2021/1/6	critical
22053	Mandrake Linux Security Advisory : php (MDKSA-2006:122)	Nessus	Mandriva Local Security Checks	2006/7/17	2021/1/6	critical
3732	PHP 4.x < 4.4.4 / 5.x < 5.1.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2006/10/12	2019/3/6	medium
801073	PHP < 4.4.4 / 5.1.4 Multiple Vulnerabilities	Log Correlation Engine	Web Servers			high

检测

插件搜索

high

high

critical

high

high

critical

high

critical

high

critical

high

high

high

critical

critical

medium

high