This host is installed with PHP and is prone to information disclosure vulnerability.

Successful exploitation will allow a local attacker to gain access to sensitive information. Impact Level: Application

Upgrade to PHP version 5.3.29 or 5.4.30 or 5.5.14 or later

The flaw is due to an error in the 'hp_print_info' function within /ext/standard/info.c script.

PHP before version 5.3.x before 5.3.29, 5.4.x before 5.4.30, 5.5.x before 5.5.14

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://php.net/ChangeLog-5.php
• http://www.osvdb.com/108468
• https://bugs.php.net/bug.php?id=67498
• https://www.sektioneins.de/en/blog/14-07-04-phpinfo-infoleak.html

---

Updated on 2015-03-25