The Hardened-PHP Project discovered buffer overflows in htmlentities/htmlspecialchars internal routines to the PHP Project.
The purpose of these functions is to be filled with user input. (The overflow can only be when UTF-8 is used) (CVE-2006-5465)

Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions. NOTE: the tempnam vector might overlap CVE-2006-1494. (CVE-2006-5706)

Updated packages have been patched to correct these issues. Users must restart Apache for the changes to take effect.

According to its banner, the version of PHP 5.x installed on the remote host is older than 5.2.  Such versions may be affected by several buffer overflows. 

To exploit these issues, an attacker would need the ability to upload an arbitrary PHP script on the remote server or to manipulate several variables processed by some PHP functions such as 'htmlentities().'

バナーによると、リモートホストにインストールされている PHP 5.x のバージョンは、5.2 より前です。このようなバージョンは、いくつかのバッファオーバーフローの影響を受けることがあります。 

これらの問題を悪用するには、攻撃者に、リモートサーバーで任意の PHP スクリプトをアップロードするため、または「htmlentities()」などのいくつかの PHP の関数で処理された複数の変数を操作するための能力が、必要です。

根據其標題，遠端主機上安裝的 PHP 5.x 版本比 5.2 舊。這些版本可能受到多個緩衝區溢位影響。 

若要惡意利用這些問題，攻擊者需要可以將任意 PHP 指令碼上傳至遠端伺服器，或可以操作由 PHP 函數 (如「htmlentities()」) 處理的一些變數。

根据其标题，远程主机上安装的 PHP 5.x 版本低于 5.2。此类版本可能会受到多个缓冲区溢出的影响。 

为利用这些问题，攻击者需要能够在远程服务器上上传任意 PHP 脚本或操纵由“htmlentities()”等 PHP 函数处理的多个变量。

 According to its banner, the version of PHP 5.x installed on the remote host is older than 5.2.0.  Such versions may be affected by several buffer overflows To exploit these issues, an attacker would need the ability to upload an arbitrary PHP script to the remote server, or to be able to manipulate several variables processed by some PHP functions such as htmlentities(). 

ID	名稱	產品	系列	已發布	已更新	嚴重性
24581	Mandrake Linux Security Advisory : php (MDKSA-2006:196)	Nessus	Mandriva Local Security Checks	2007/2/18	2021/1/6	high
31649	PHP 5.x < 5.2 Multiple Vulnerabilities	Nessus	CGI abuses	2008/3/25	2024/5/31	high
31649	PHP 5.x < 5.2 の複数の脆弱性	Nessus	CGI abuses	2008/3/25	2024/5/31	high
31649	PHP 5.x < 5.2 多個弱點	Nessus	CGI abuses	2008/3/25	2024/5/31	high
31649	PHP 5.x < 5.2 多个漏洞	Nessus	CGI abuses	2008/3/25	2024/5/31	high
4444	PHP 5.x < 5.2.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2008/3/25	2019/3/6	high

偵測

搜尋 Plugin

high

high

high

high

high

high