The host is installed with PHP and is prone to Denial of Service vulnerability.

Successful exploitation could result in denial of service condition. Impact Level: Application

Upgrade to PHP version 5.2.9 or above, http://www.php.net/downloads.php Workaround: For workaround refer below link, http://cvs.php.net/viewvc.cgi/php-src/ext/json/JSON_parser.c?r1=1.1.2.14&r2=1.1.2.15

Improper handling of .zip file while doing extraction via php_zip_make_relative_path function in php_zip.c file.

PHP version prior to 5.2.9

• http://www.openwall.com/lists/oss-security/2009/04/01/9
• http://www.php.net/releases/5_2_9.php

---

Updated on 2015-03-25