{"result": {"nessus": [{"lastseen": "2017-10-29T13:44:36", "references": ["http://www.php.net/ChangeLog-5.php#5.6.17", "http://www.nessus.org/u?6bf26094", "http://www.php.net/ChangeLog-5.php#5.5.31"], "pluginID": "87854", "description": "PHP reports :\n\n- Core :\n\n- Fixed bug #70755 (fpm_log.c memory leak and buffer overflow).\n\n- GD :\n\n- Fixed bug #70976 (Memory Read via gdImageRotateInterpolated Array Index Out of Bounds).\n\n- SOAP :\n\n- Fixed bug #70900 (SoapClient systematic out of memory error).\n\n- Wddx\n\n- Fixed bug #70661 (Use After Free Vulnerability in WDDX Packet Deserialization).\n\n- Fixed bug #70741 (Session WDDX Packet Deserialization Type Confusion Vulnerability).\n\n- XMLRPC :\n\n- Fixed bug #70728 (Type Confusion Vulnerability in PHP_to_XMLRPC_worker()).", "edition": 2, "reporter": "Tenable", "published": "2016-01-12T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "nessus", "title": "FreeBSD : php -- multiple vulnerabilities (6b771fe2-b84e-11e5-92f9-485d605f4717)", "naslFamily": "FreeBSD Local Security Checks", "bulletinFamily": "scanner", "cvelist": [], "cpe": ["p-cpe:/a:freebsd:freebsd:php55-gd", "p-cpe:/a:freebsd:freebsd:php56-xmlrpc", "cpe:/o:freebsd:freebsd", "p-cpe:/a:freebsd:freebsd:php56-gd", "p-cpe:/a:freebsd:freebsd:php56-soap", "p-cpe:/a:freebsd:freebsd:php55-xmlrpc", "p-cpe:/a:freebsd:freebsd:php55", "p-cpe:/a:freebsd:freebsd:php56", "p-cpe:/a:freebsd:freebsd:php55-wddx", "p-cpe:/a:freebsd:freebsd:php56-wddx"], "modified": "2016-01-12T00:00:00", "id": "FREEBSD_PKG_6B771FE2B84E11E592F9485D605F4717.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=87854", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the FreeBSD VuXML database :\n#\n# Copyright 2003-2016 Jacques Vidrine and contributors\n#\n# Redistribution and use in source (VuXML) and 'compiled' forms (SGML,\n# HTML, PDF, PostScript, RTF and so forth) with or without modification,\n# are permitted provided that the following conditions are met:\n# 1. Redistributions of source code (VuXML) must retain the above\n# copyright notice, this list of conditions and the following\n# disclaimer as the first lines of this file unmodified.\n# 2. Redistributions in compiled form (transformed to other DTDs,\n# published online in any format, converted to PDF, PostScript,\n# RTF and other formats) must reproduce the above copyright\n# notice, this list of conditions and the following disclaimer\n# in the documentation and/or other materials provided with the\n# distribution.\n# \n# THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS \"AS IS\"\n# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,\n# THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR\n# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS\n# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,\n# OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT\n# OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR\n# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,\n# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE\n# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,\n# EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(87854);\n script_version(\"$Revision: 2.1 $\");\n script_cvs_date(\"$Date: 2016/01/12 14:52:09 $\");\n\n script_name(english:\"FreeBSD : php -- multiple vulnerabilities (6b771fe2-b84e-11e5-92f9-485d605f4717)\");\n script_summary(english:\"Checks for updated packages in pkg_info output\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote FreeBSD host is missing one or more security-related\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"PHP reports :\n\n- Core :\n\n- Fixed bug #70755 (fpm_log.c memory leak and buffer overflow).\n\n- GD :\n\n- Fixed bug #70976 (Memory Read via gdImageRotateInterpolated Array\nIndex Out of Bounds).\n\n- SOAP :\n\n- Fixed bug #70900 (SoapClient systematic out of memory error).\n\n- Wddx\n\n- Fixed bug #70661 (Use After Free Vulnerability in WDDX Packet\nDeserialization).\n\n- Fixed bug #70741 (Session WDDX Packet Deserialization Type Confusion\nVulnerability).\n\n- XMLRPC :\n\n- Fixed bug #70728 (Type Confusion Vulnerability in\nPHP_to_XMLRPC_worker()).\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.php.net/ChangeLog-5.php#5.5.31\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.php.net/ChangeLog-5.php#5.6.17\"\n );\n # http://www.freebsd.org/ports/portaudit/6b771fe2-b84e-11e5-92f9-485d605f4717.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?6bf26094\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:php55\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:php55-gd\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:php55-wddx\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:php55-xmlrpc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:php56\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:php56-gd\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:php56-soap\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:php56-wddx\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:php56-xmlrpc\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:freebsd:freebsd\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/01/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/01/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/01/12\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016 Tenable Network Security, Inc.\");\n script_family(english:\"FreeBSD Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/FreeBSD/release\", \"Host/FreeBSD/pkg_info\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"freebsd_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/FreeBSD/release\")) audit(AUDIT_OS_NOT, \"FreeBSD\");\nif (!get_kb_item(\"Host/FreeBSD/pkg_info\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (pkg_test(save_report:TRUE, pkg:\"php55<5.5.31\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"php55-gd<5.5.31\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"php55-wddx<5.5.31\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"php55-xmlrpc<5.5.31\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"php56<5.6.17\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"php56-gd<5.6.17\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"php56-soap<5.6.17\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"php56-wddx<5.6.17\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"php56-xmlrpc<5.6.17\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:pkg_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 0.0, "vector": "NONE"}}]}}