バナーによると、リモートホストにインストールされている PHP のバージョンは、4.4.7 / 5.2.2 より前です。これらのバージョンは、GDライブラリ内のバッファオーバーフローを含む、いくつかの問題の影響を受ける可能性があります。

根據其標題，遠端主機上安裝的 PHP 版本比 4.4.7 / 5.2.2 舊。這些版本可能受到多個問題影響，其中便包括 GD 庫中的緩衝區溢位問題。

The following issues have been fixed :

  - missing open_basedir and safe_mode restriction.
    (CVE-2007-3007)

  - chunk_split() integer overflow. (CVE-2007-2872)

  - DoS condition in libgd's image processing.
    (CVE-2007-2756)

  - possible super-global overwrite inside     import_request_variables(). (CVE-2007-1396)

  - buffer overflow inside user_filter_factory_create().
    (CVE-2007-2511)

  - remotely trigger-able buffer overflow inside bundled     libxmlrpc. (CVE-2007-1864)

  - CRLF injection inside ftp_putcmd(). (CVE-2007-2509)

  - remotely trigger-able buffer overflow inside     make_http_soap_request(). (CVE-2007-2510)

  - MOPB-41-2007:PHP 5 sqlite_udf_decode_binary() Buffer     Overflow Vulnerability. (CVE-2007-0906)

  - MOPB-03-2007: deep recursion DoS (CVE-2007-1285)

The following issues have been fixed in PHP, which were spotted by the MOPB project or fixed in PHP 5.2.3 release :

  - missing open_basedir and safe_mode restriction     (CVE-2007-3007)

  - chunk_split() integer overflow (CVE-2007-2872)

  - DoS condition in libgd's image processing     (CVE-2007-2756)

  - possible super-global overwrite inside     import_request_variables() (CVE-2007-1396)

  - buffer overflow inside user_filter_factory_create()     (CVE-2007-2511)

  - remotely trigger-able buffer overflow inside bundled     libxmlrpc (CVE-2007-1864)

  - CRLF injection inside ftp_putcmd() (CVE-2007-2509)

  - remotely trigger-able buffer overflow inside     make_http_soap_request() (CVE-2007-2510)

  - MOPB-41-2007:PHP 5 sqlite_udf_decode_binary() Buffer     Overflow Vulnerability (CVE-2007-0906)

  - MOPB-03-2007: deep recursion DoS (CVE-2007-1285)

According to its banner, the version of PHP installed on the remote host is older than 4.4.7 / 5.2.2.  Such versions may be affected by several issues, including buffer overflows in the GD library.

The remote host is running a version of PHP lower than 4.4.7 or 5.2.2.  This version is vulnerable to a number of remote issues.  At least one of these issues is related to a buffer overflow attack.  An attacker exploiting these flaws would be able to impact confidentiality, integrity, and availability. 

ID	名前	製品	ファミリー	公開日	更新日	深刻度
25159	PHP < 4.4.7/5.2.2複数の脆弱性	Nessus	CGI abuses	2007/5/4	2024/5/28	high
25159	PHP < 4.4.7 / 5.2.2 多種弱點	Nessus	CGI abuses	2007/5/4	2024/5/28	high
29552	SuSE 10 Security Update : PHP5 (ZYPP Patch Number 3754)	Nessus	SuSE Local Security Checks	2007/12/13	2021/1/14	high
27391	openSUSE 10 Security Update : php5 (php5-3745)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	high
25159	PHP < 4.4.7 / 5.2.2 Multiple Vulnerabilities	Nessus	CGI abuses	2007/5/4	2024/5/28	high
27392	openSUSE 10 Security Update : php5 (php5-3753)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	high
3982	PHP 4.x < 4.4.7 / 5.x < 5.2.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2007/5/4	2019/3/6	high

検出

プラグインの検索

high

high

high

high

high

high

high