The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-101:02 advisory.

    PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write     dynamically generated webpages. PHP also offers built-in database integration for several commercial and     non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly     simple. The most common use of PHP coding is probably as a replacement for CGI scripts.
    The php package contains the module which adds support for the PHP language to Apache HTTP Server.
    Security issues fixed with this release:
    CVE-2012-0830     The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute     arbitrary code via a request containing a large number of variables, related to improper handling of array     variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

New php packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues.

USN 1358-1 fixed multiple vulnerabilities in PHP. The fix for CVE-2012-0831 introduced a regression where the state of the magic_quotes_gpc setting was not correctly reflected when calling the ini_get() function.

We apologize for the inconvenience.

It was discovered that PHP computed hash values for form parameters without restricting the ability to trigger hash collisions predictably. This could allow a remote attacker to cause a denial of service by sending many crafted parameters. (CVE-2011-4885)

ATTENTION: this update changes previous PHP behavior by limiting the number of external input variables to 1000.
This may be increased by adding a 'max_input_vars' directive to the php.ini configuration file. See http://www.php.net/manual/en/info.configuration.php#ini.max- input-vars for more information.

Stefan Esser discovered that the fix to address the predictable hash collision issue, CVE-2011-4885, did not properly handle the situation where the limit was reached.
This could allow a remote attacker to cause a denial of service or execute arbitrary code via a request containing a large number of variables. (CVE-2012-0830)

It was discovered that PHP did not always check the return value of the zend_strndup function. This could allow a remote attacker to cause a denial of service.
(CVE-2011-4153)

It was discovered that PHP did not properly enforce libxslt security settings. This could allow a remote attacker to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension. (CVE-2012-0057)

It was discovered that PHP did not properly enforce that PDORow objects could not be serialized and not be saved in a session. A remote attacker could use this to cause a denial of service via an application crash. (CVE-2012-0788)

It was discovered that PHP allowed the magic_quotes_gpc setting to be disabled remotely. This could allow a remote attacker to bypass restrictions that could prevent a SQL injection. (CVE-2012-0831)

USN 1126-1 addressed an issue where the /etc/cron.d/php5 cron job for PHP allowed local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/. Emese Revfy discovered that the fix had not been applied to PHP for Ubuntu 10.04 LTS. This update corrects the issue. We apologize for the error.
(CVE-2011-0441).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update contains the latest release of PHP, 5.3.10, which fixes a security issue.

A security fix introduced in PHP 5.3.9 allowed a remote user to crash the PHP interpreter, or possibly, execute arbitrary code.
(CVE-2012-0830)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201209-03 (PHP: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in PHP. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could execute arbitrary code with the privileges of       the process, cause a Denial of Service condition, obtain sensitive       information, create arbitrary files, conduct directory traversal attacks,       bypass protection mechanisms, or perform further attacks with unspecified       impact.
  Workaround :

    There is no known workaround at this time.

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-178:02 advisory.

    PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write     dynamically generated webpages. PHP also offers built-in database integration for several commercial and     non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly     simple. The most common use of PHP coding is probably as a replacement for CGI scripts.
    The php package contains the module which adds support for the PHP language to Apache HTTP Server.
    Security issues fixed with this release:
    CVE-2012-0830     The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute     arbitrary code via a request containing a large number of variables, related to improper handling of array     variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0093 advisory.

  - php: remote code exec flaw introduced in the CVE-2011-4885 hashdos fix (CVE-2012-0830)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update has the latest release of PHP, 5.3.10, which fixes a security issue.

A previous security fix introduced in PHP 5.3.9 allowed a remote user to crash the PHP interpreter, or possibly execute arbitrary code.
(CVE-2012-0830)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of PHP that is affected by an arbitrary code execution vulnerability.

Specifically, the fix for the hash collision denial of service vulnerability (CVE-2011-4885) introduces a remote code execution vulnerability in the function 'php_register_variable_ex()' in the file 'php_variables.c'. A new configuration variable, 'max_input_vars', was added as a part of the fix. If the number of input variables exceeds this value and the variable being processed is an array, code execution can occur.

Note that this script assumes the 'max_input_vars' parameter is set to the default value of 1000, and only runs if 'Report paranoia' is set to 'Paranoid', and 'Enable CGI scanning' is checked.

This update of php5 fixes multiple security flaws :

  - missing checks of return values could allow remote     attackers to cause a denial of service (NULL pointer     dereference). (CVE-2011-4153)

  - denial of service via hash collisions. (CVE-2011-4885)

  - specially crafted XSLT stylesheets could allow remote     attackers to create arbitrary files with arbitrary     content. (CVE-2012-0057)

  - remote attackers can cause a denial of service via     specially crafted input to an application that attempts     to perform Tidy::diagnose operations. (CVE-2012-0781)

  - applications that use a PDO driver were prone to denial     of service flaws which could be exploited remotely.
    (CVE-2012-0788)

  - memory leak in the timezone functionality could allow     remote attackers to cause a denial of service (memory     consumption). (CVE-2012-0789)

  - a stack-based buffer overflow in php5's Suhosin     extension could allow remote attackers to execute     arbitrary code via a long string that is used in a     Set-Cookie HTTP header. (CVE-2012-0807)

  - this fixes an incorrect fix for CVE-2011-4885 which     could allow remote attackers to execute arbitrary code     via a request containing a large number of variables.
    (CVE-2012-0830)

  - temporary changes to the magic_quotes_gpc directive     during the importing of environment variables is not     properly performed which makes it easier for remote     attackers to conduct SQL injections. (CVE-2012-0831)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

It was discovered that the fix for CVE-2011-4885 (released via in a previous update for php53) introduced an uninitialized memory use flaw. A remote attacker could send a specially crafted HTTP request to cause the PHP interpreter to crash or, possibly, execute arbitrary code. (CVE-2012-0830)

All php53 users should upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

It was discovered that the fix for CVE-2011-4885 (released via previous php packages) introduced an uninitialized memory use flaw. A remote attacker could send a specially crafted HTTP request to cause the PHP interpreter to crash or, possibly, execute arbitrary code.
(CVE-2012-0830)

All php users should upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0093 advisory.

    [5.3.3-3.6]
    - add security fix for CVE-2012-0830 (#786743)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
284278	MiracleLinux 4 : php-5.3.3-3.AXS4.6 (AXSA:2012-101:02)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical
57893	Slackware 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / current : php (SSA:2012-041-02)	Nessus	Slackware Local Security Checks	2012/2/13	2021/1/14	high
57932	Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : php5 regression (USN-1358-2)	Nessus	Ubuntu Local Security Checks	2012/2/14	2019/9/19	high
57954	Fedora 15 : maniadrive-1.2-32.fc15.2 / php-5.3.10-1.fc15 / php-eaccelerator-0.9.6.1-9.fc15.2 (2012-1301)	Nessus	Fedora Local Security Checks	2012/2/15	2021/1/11	high
62236	GLSA-201209-03 : PHP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2012/9/24	2022/3/28	critical
284067	MiracleLinux 3 : php-5.1.6-27.5.0.2.AXS3 (AXSA:2012-178:02)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical
57821	RHEL 4 / 5 / 6 : php (RHSA-2012:0093)	Nessus	Red Hat Local Security Checks	2012/2/3	2024/4/27	critical
57869	Fedora 16 : maniadrive-1.2-32.fc16.2 / php-5.3.10-1.fc16 / php-eaccelerator-0.9.6.1-9.fc16.2 (2012-1262)	Nessus	Fedora Local Security Checks	2012/2/9	2021/1/11	high
58039	PHP 5.3.9 'php_register_variable_ex()' Code Execution (intrusive check)	Nessus	CGI abuses	2012/2/20	2022/4/11	critical
58480	SuSE 10 Security Update : PHP5 (ZYPP Patch Number 8009)	Nessus	SuSE Local Security Checks	2012/3/26	2021/1/19	high
61237	Scientific Linux Security Update : php53 on SL5.x i386/x86_64 (20120202)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
61238	Scientific Linux Security Update : php on SL4.x, SL5.x, SL6.x i386/x86_64 (20120202)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
68449	Oracle Linux 5 / 6 : php (ELSA-2012-0093)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical
74580	openSUSE Security Update : php5 (openSUSE-SU-2012:0426-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	high

检测

插件搜索

critical

high

high

high

critical

critical

critical

high

critical

high

high

high

critical

high