Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vectors. NOTE: this issue reportedly exists because of a regression related to CVE-2007-4663.

According to its banner, the version of PHP 4.x installed on the remote host is older than 4.4.8.  Such versions may be affected by several issues, including integer overflows involving the 'chunk_split', 'strcspn', and 'strspn' functions, and 'safe_mode' / 'open_basedir' bypasses. 

New php-4.4.8 packages are available for Slackware 10.2 and 11.0 to fix security issues.

According to its banner, the version of PHP installed on the remote host is older than 4.4.8.  Such versions may be affected by several issues, including integer overflows involving the 'chunk_split', 'strcspn', and 'strspn' functions, and 'safe_mode' / 'open_basedir' bypasses.

ID	Name	Product	Family	Severity
4331	PHP 4.x < 4.4.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	medium
31101	Slackware 10.2 / 11.0 : php (SSA:2008-045-03)	Nessus	Slackware Local Security Checks	high
29833	PHP < 4.4.8 Multiple Vulnerabilities	Nessus	CGI abuses	high

Detections

Analytics

CVE-2008-0145

critical

Tenable Plugins

medium

high

high