Description

This alert was generated using only banner information. It may be a false positive.

PHP have released an upgrade to address multiple vulnerabilities, including integer overflow issues that have been reported to affect PHP4 and bundled software.

Affected PHP versions (up to 4.3.2).

Remediation

Upgrade PHP to the latest version.

References

BID 8693

BUD 8696

PHP Homepage

Related Vulnerabilities

Microsoft SQL Server Other Vulnerability (CVE-2000-1085)

Moment.js Uncontrolled Resource Consumption Vulnerability (CVE-2016-4055)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3508)

WordPress Plugin Subscribe to Comments Unsubscribe Challenge Information Disclosure (2.0.2)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-0988)

Severity

High

Classification

CVE-2003-0860 CVE-2003-0861 CWE-119 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update Code Execution Denial Of Service