ID de Prueba:	1.3.6.1.4.1.25623.1.0.804849
Categoría:	Web application abuses
Título:	PHP Information Disclosure Vulnerability - 01 (Sep 2014)
Resumen:	PHP is prone to an information disclosure vulnerability.;; This VT has been deprecated and merged into the VTs 'PHP Multiple Vulnerabilities (Jun/Aug 2014) - Linux' (OID:; 1.3.6.1.4.1.25623.1.0.809736) and 'PHP Multiple Vulnerabilities (Jun/Aug 2014) - Windows' (OID:; 1.3.6.1.4.1.25623.1.0.809735).
Descripción:	Summary: PHP is prone to an information disclosure vulnerability. This VT has been deprecated and merged into the VTs 'PHP Multiple Vulnerabilities (Jun/Aug 2014) - Linux' (OID: 1.3.6.1.4.1.25623.1.0.809736) and 'PHP Multiple Vulnerabilities (Jun/Aug 2014) - Windows' (OID: 1.3.6.1.4.1.25623.1.0.809735). Vulnerability Insight: The flaw is due to an error in the 'hp_print_info' function within /ext/standard/info.c script. Vulnerability Impact: Successful exploitation will allow a local attacker to gain access to sensitive information. Affected Software/OS: PHP before version 5.3.x before 5.3.29, 5.4.x before 5.4.30, 5.5.x before 5.5.14 Solution: Update to PHP version 5.3.29 or 5.4.30 or 5.5.14 or later. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4721 Debian Security Information: DSA-2974 (Google Search) http://www.debian.org/security/2014/dsa-2974 http://twitter.com/mikispag/statuses/485713462258302976 https://www.sektioneins.de/en/blog/14-07-04-phpinfo-infoleak.html RedHat Security Advisories: RHSA-2014:1765 http://rhn.redhat.com/errata/RHSA-2014-1765.html RedHat Security Advisories: RHSA-2014:1766 http://rhn.redhat.com/errata/RHSA-2014-1766.html http://secunia.com/advisories/54553 http://secunia.com/advisories/59794 http://secunia.com/advisories/59831 SuSE Security Announcement: openSUSE-SU-2014:0945 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html SuSE Security Announcement: openSUSE-SU-2014:1236 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.