According to its banner, the version of PHP running on the remote web server is 5.5.x prior to 5.5.36. It is, therefore, affected by multiple vulnerabilities :

  - An out-of-bounds read error exists in the
    _gdContributionsCalc() function within file     ext/gd/libgd/gd_interpolation.c. An unauthenticated,     remote attacker can exploit this to disclose sensitive     information or crash the process linked against the     library. (CVE-2013-7456)

  - An uninitialized pointer flaw exists in the     phar_make_dirstream() function within file     ext/phar/dirstream.c due to improper handling of     ././@LongLink files. An unauthenticated, remote attacker     can exploit this, via a specially crafted TAR file, to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2016-4343)

  - An out-of-bounds read error exists in the     get_icu_value_internal() function within file     ext/intl/locale/locale_methods.c due to improper     handling of user-supplied input. An unauthenticated,     remote attacker can exploit this to disclose sensitive     information or crash the process linked against the     library. (CVE-2016-5093)

  - An integer overflow condition exists in the     php_html_entities() and php_filter_full_special_chars()     functions within file ext/standard/html.c due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this to     have an unspecified impact. (CVE-2016-5094)

  - An integer underflow condition exists in file     ext/standard/file.c due to improper validation of     user-supplied input. An unauthenticated, remote     attacker can exploit this to cause a NULL write,     resulting in crashing the process linked against the     library. (CVE-2016-5096)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development.

The vulnerabilities are addressed by upgrading PHP to the new upstream version 5.6.22, which includes additional bug fixes. Please refer to the upstream changelog for more information :

  - https://php.net/ChangeLog-5.php#5.6.21
  - https://php.net/ChangeLog-5.php#5.6.22

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.6. It is, therefore, affected by multiple vulnerabilities in the following components :

  - apache_mod_php
  - Audio
  - bsdiff
  - CFNetwork
  - CoreGraphics
  - FaceTime
  - Graphics Drivers
  - ImageIO
  - Intel Graphics Driver
  - IOHIDFamily
  - IOKit
  - IOSurface
  - Kernel
  - libc++abi
  - libexpat
  - LibreSSL
  - libxml2
  - libxslt
  - Login Window
  - OpenSSL
  - QuickTime
  - Safari Login AutoFill
  - Sandbox Profiles

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	Name	Product	Family	Published	Updated	Severity
137966	EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2020-1747)	Nessus	Huawei Local Security Checks	7/1/2020	4/25/2023	critical
91441	PHP 5.5.x < 5.5.36 Multiple Vulnerabilities	Nessus	CGI abuses	6/2/2016	5/26/2025	high
91615	Debian DSA-3602-1 : php5 - security update	Nessus	Debian Local Security Checks	6/15/2016	1/11/2021	critical
92496	Mac OS X 10.11.x < 10.11.6 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	7/21/2016	5/28/2024	critical

Detections

Analytics

Plugins Search

critical

high

critical

critical