http://bugs.php.net/bug.php?id=41655

28318

28936

SSA:2008-045-03

http://www.php.net/ChangeLog-4.php

http://www.php.net/releases/4_4_8.php

ADV-2008-0059

php-glob-openbasedir-security-bypass(39401)

According to its banner, the version of PHP 4.x installed on the remote host is older than 4.4.8.  Such versions may be affected by several issues, including integer overflows involving the 'chunk_split', 'strcspn', and 'strspn' functions, and 'safe_mode' / 'open_basedir' bypasses. 

New php-4.4.8 packages are available for Slackware 10.2 and 11.0 to fix security issues.

According to its banner, the version of PHP installed on the remote host is older than 4.4.8.  Such versions may be affected by several issues, including integer overflows involving the 'chunk_split', 'strcspn', and 'strspn' functions, and 'safe_mode' / 'open_basedir' bypasses.

ID	Name	Product	Family	Severity
4331	PHP 4.x < 4.4.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	medium
31101	Slackware 10.2 / 11.0 : php (SSA:2008-045-03)	Nessus	Slackware Local Security Checks	high
29833	PHP < 4.4.8 Multiple Vulnerabilities	Nessus	CGI abuses	high

CVE-2008-0145

high

Tenable Plugins

medium

high

high