The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-701:04 advisory.

    Description :
    PHP is an HTML-embedded scripting language. PHP attempts to make it     easy for developers to write dynamically generated webpages. PHP also     offers built-in database integration for several commercial and     non-commercial database management systems, so writing a     database-enabled webpage with PHP is fairly simple. The most common     use of PHP coding is probably as a replacement for CGI scripts.
    The php package contains the module which adds support for the PHP     language to Apache HTTP Server.
    Security issues fixed with this release:
    CVE-2014-3668     Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in     the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote     attackers to cause a denial of service (application crash) via (1) a crafted first argument to the     xmlrpc_set_type function or (2) a crafted argument to the xmlrpc_decode function, related to an out-of-     bounds read operation.
    CVE-2014-3669     Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34,     5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service     (application crash) or possibly execute arbitrary code via an argument to the unserialize function that     triggers calculation of a large length value.
    CVE-2014-3670     The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before     5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, which allows remote     attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute     arbitrary code via a crafted JPEG image with TIFF thumbnail data that is improperly handled by the     exif_thumbnail function.
    CVE-2014-3710
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when     announcing a new security problem. When the candidate has been publicized, the details for this candidate     will be provided.
    Fixed bugs:
    * Previously, a mysql link could be closed even when prepared statements still existed. So, executing     those statements caused a segmentation fault. With this update, fixed it.
    * Previously, the host HTTP header was missing from soap calls. So, HTTP requests were not RFC2616     compliant. With this update, fixed it.
    * Previously, the php packages contained a bug concerning the oci_lob_load() function. So, compiling the     php OCI8 module failed. With this update, fixed it.
    * Previously, dependency on the Spl extension for the Session extension was missing from the php packages.
    So, Spl was uninitialized before Session, which made the autoload feature unavailable. With this update,     fixed it.
    * Previously, the php packages contained an inconsistency in the behavior of a static call in a non-static     method. So,  a call from the context's class (name, static or self) inside a non-static method results in     a static-call. With this update, fixed it.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its banner, the version of PHP 5.4.x installed on the remote host is prior to 5.4.34. It is, therefore, affected by the following vulnerabilities :

  - A buffer overflow error exists in the function     'mkgmtime' that can allow application crashes or     arbitrary code execution. (CVE-2014-3668)

  - An integer overflow error exists in the function     'unserialize' that can allow denial of service attacks.
    Note that this only affects 32-bit instances.
    (CVE-2014-3669)

  - A heap corruption error exists in the function     'exif_thumbnail' that can allow application crashes or     arbitrary code execution. (CVE-2014-3670)

  - An input-validation error exists in the cURL extension's     file 'ext/curl/interface.c' and NULL option handling     that can allow information disclosure. (Bug #68089)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

New php packages are available for Slackware 14.0, 14.1, and -current to fix security issues.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1768 advisory.

    - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710
    - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
    - core: fix integer overflow in unserialize() CVE-2014-3669

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash.
(CVE-2014-3668)

An integer overflow flaw was found in the way custom objects were unserialized. Specially crafted input processed by the unserialize() function could cause a PHP application to crash. (CVE-2014-3669)

A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_thumbnail() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application.
(CVE-2014-3670)

A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_thumbnail() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application.
(CVE-2014-3670)

An integer overflow flaw was found in the way custom objects were unserialized. Specially crafted input processed by the unserialize() function could cause a PHP application to crash. (CVE-2014-3669)

An out-of-bounds read flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file.
(CVE-2014-3710)

An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash.
(CVE-2014-3668)

The CVE-2014-3710 issue was discovered by Francisco Alonso of Red Hat Product Security.

After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

- security update :

  - CVE-2014-3670 [bnc#902357]

  - CVE-2014-3669 [bnc#902360]

  - CVE-2014-3668 [bnc#902368]

  - added patches :

  - php-CVE-2014-3670.patch

  - php-CVE-2014-3669.patch

  - php-CVE-2014-3668.patch

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.3. It is, therefore, affected multiple vulnerabilities in the following components :

  - Admin Framework
  - Apache
  - ATS
  - Certificate Trust Policy
  - CFNetwork HTTPProtocol
  - CFNetwork Session
  - CFURL
  - CoreAnimation
  - FontParser
  - Graphics Driver
  - Hypervisor
  - ImageIO
  - IOHIDFamily
  - Kernel
  - LaunchServices
  - libnetcore
  - ntp
  - Open Directory Client
  - OpenLDAP
  - OpenSSL
  - PHP
  - QuickLook
  - SceneKit
  - ScreenSharing
  - Security - Code SIgning
  - UniformTypeIdentifiers
  - WebKit

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
93161	SUSE SLES11 Security Update : php53 (SUSE-SU-2016:1638-1) (BACKRONYM)	Nessus	SuSE Local Security Checks	2016/8/29	2026/1/27	critical
289663	MiracleLinux 4 : php-5.3.3-40.AXS4 (AXSA:2014-701:04)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	medium
78545	PHP 5.4.x < 5.4.34 Multiple Vulnerabilities	Nessus	CGI abuses	2014/10/17	2025/5/26	high
78831	Slackware 14.0 / 14.1 / current : php (SSA:2014-307-03)	Nessus	Slackware Local Security Checks	2014/11/4	2021/1/14	high
78755	Oracle Linux 5 : php53 (ELSA-2014-1768)	Nessus	Oracle Linux Local Security Checks	2014/10/31	2024/10/22	medium
78778	Amazon Linux AMI : php55 (ALAS-2014-435)	Nessus	Amazon Linux Local Security Checks	2014/11/3	2018/4/18	high
78853	Scientific Linux Security Update : php on SL6.x, SL7.x i386/x86_64 (20141030)	Nessus	Scientific Linux Local Security Checks	2014/11/4	2021/1/14	high
79102	openSUSE Security Update : php5 (openSUSE-SU-2014:1377-1)	Nessus	SuSE Local Security Checks	2014/11/11	2021/1/19	high
82699	Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities (FREAK)	Nessus	MacOS X Local Security Checks	2015/4/10	2024/5/28	critical

检测

插件搜索

critical

medium

high

high

medium

high

high

high

critical