(PVS) Signatures - Tenable Network Security

Description: The remote host is running a version of PHP which is older than 4.2.2. This version has a
bug which allows an attacker to disable the remote server or execute arbitrary code on it.
Solution: Upgrade to PHP 4.2.2 or downgrade to 4.1.x
CVE-2002-0986
PHP < 4.3.1 CGI Module File Access
PVS ID: 1477 FAMILY: Web Servers RISK: HIGH NESSUS ID:11237
Description: The remote host is running PHP 4.3.0 which contains a flaw which may let anyone execute
arbitrary PHP code on this host.
Solution: Upgrade to PHP 4.3.1 or higher.
CVE-2003-0097
PHP < 3.0.17 / 4.0.3 Hidden Form Field File Upload
PVS ID: 1478 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:10513
Description: The remote host is running a version of PHP which is older than 3.0.17 or 4.0.3. If a PHP
script that allows users to upload files and then display their content is running on this host,
an attacker may use it to read arbitrary files.
Solution: Upgrade to PHP 3.0.17 or 4.0.3 or higher.
CVE-2000-0860
PHP < 4.0.4 IMAP Module Overflow
PVS ID: 1479 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:10628
Description: The remote host is running a version of PHP which is older than 4.0.4. There is a buffer
overflow in the IMAP module of this version which may allow an attacker to execute
arbitrary commands with the privileges of the web server if a PHP script connects to a
rogue IMAP server.
Solution: Upgrade to PHP 4.0.4
CVE Not available
PHP < 3.0.17 / 4.0.3 Error Log Command Injection
PVS ID: 1480 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:10535
Family Internet Services 381