Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.

The remote host is missing Security Update 2005-001. This security update contains a number of enhancements for the following programs :

 - at commands
 - ColorSync
 - libxml2
 - Mail
 - PHP
 - Safari
 - SquirrelMail
 

he remote host is missing Security Update 2005-001. This security update contains a number of fixes for the following programs :

  - at commands
  - ColorSync
  - libxml2
  - Mail
  - PHP
  - Safari
  - SquirrelMail

These programs have multiple vulnerabilities which may allow a remote attacker to execute arbitrary code.

The remote host is running a version of PHP that is older than 4.3.3.

All versions of PHP 4 older than 4.3.3 contain multiple integer overflow vulnerabilities that may allow an attacker to execute arbitrary commands on this host.  Another problem may also invalidate safe_mode.

ID	Name	Product	Family	Type	Severity
2555	Mac OS X Multiple Vulnerabilities (Security Update 2005-001)	Nessus Network Monitor	Web Clients		critical
16251	Mac OS X Multiple Vulnerabilities (Security Update 2005-001)	Nessus	MacOS X Local Security Checks	Local	high
11850	PHP < 4.3.3 Multiple Vulnerabilities	Nessus	CGI abuses	Remote	high

Detections

Analytics

CVE-2003-0860

critical

Tenable Plugins

critical

high

high