バナーによると、リモートホストにインストールされている PHP のバージョンは、4.4.7 / 5.2.2 より前です。これらのバージョンは、GDライブラリ内のバッファオーバーフローを含む、いくつかの問題の影響を受ける可能性があります。

This Update fixes numerous vulnerabilities in PHP. Most of them were made public during the 'Month of PHP Bugs'. The vulnerabilities potentially lead to crashes, information leaks or even execution of malicious code.

CVE-2007-1380, CVE-2007-0988, CVE-2007-1375, CVE-2007-1454 CVE-2007-1453, CVE-2007-1521, CVE-2007-1522, CVE-2007-1376 CVE-2007-1583, CVE-2007-1460, CVE-2007-1461, CVE-2007-1484 CVE-2007-1700, CVE-2007-1717, CVE-2007-1718, CVE-2007-1001 CVE-2007-1824, CVE-2007-1889, CVE-2007-1900

This Update fixes numerous vulnerabilities in PHP. Most of them were made public during the 'Month of PHP Bugs'. The vulnerabilities potentially lead to crashes, information leaks or even execution of malicious code.

CVE-2007-1380 / CVE-2007-0988 / CVE-2007-1375 / CVE-2007-1521 / CVE-2007-1376 / CVE-2007-1583 / CVE-2007-1461 / CVE-2007-1484 / CVE-2007-1700 / CVE-2007-1717 / CVE-2007-1718 / CVE-2007-1001 / CVE-2007-1824

根據其標題，遠端主機上安裝的 PHP 版本比 4.4.7 / 5.2.2 舊。這些版本可能受到多個問題影響，其中便包括 GD 庫中的緩衝區溢位問題。

According to its banner, the version of PHP installed on the remote host is older than 4.4.7 / 5.2.2.  Such versions may be affected by several issues, including buffer overflows in the GD library.

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. 

This update contains several security fixes for the following programs :

 - bzip2
 - CFNetwork
 - CoreAudio
 - cscope
 - gnuzip
 - iChat
 - Kerberos
 - mDNSResponder
 - PDFKit
 - PHP
 - Quartz Composer
 - Samba
 - SquirrelMail
 - Tomcat
 - WebCore
 - WebKit

The remote host is running a version of PHP lower than 4.4.7 or 5.2.2.  This version is vulnerable to a number of remote issues.  At least one of these issues is related to a buffer overflow attack.  An attacker exploiting these flaws would be able to impact confidentiality, integrity, and availability. 

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
25159	PHP < 4.4.7/5.2.2複数の脆弱性	Nessus	CGI abuses	2007/5/4	2022/4/11	high
27150	openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-3289)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	high
29378	SuSE 10 Security Update : PHP5 (ZYPP Patch Number 3290)	Nessus	SuSE Local Security Checks	2007/12/13	2021/1/14	high
25159	PHP < 4.4.7 / 5.2.2 多種弱點	Nessus	CGI abuses	2007/5/4	2022/4/11	high
25159	PHP < 4.4.7 / 5.2.2 Multiple Vulnerabilities	Nessus	CGI abuses	2007/5/4	2022/4/11	high
25830	Mac OS X Multiple Vulnerabilities (Security Update 2007-007)	Nessus	MacOS X Local Security Checks	2007/8/2	2018/7/14	critical
3982	PHP 4.x < 4.4.7 / 5.x < 5.2.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2007/5/4	2019/3/6	high

检测

插件搜索

high

high

high

high

high

critical

high