Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable6997.PRM
HistoryAug 21, 2013 - 12:00 a.m.

PHP 5.5.x < 5.5.2 Multiple Vulnerabilities

2013-08-2100:00:00
Tenable
www.tenable.com
12

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.029 Low

EPSS

Percentile

90.8%

JSON

PHP versions earlier than 5.5.2 are affected by the following vulnerabilities :

  • An error exists related to the ‘Sessions’ subsystem that can allow an attacker to hijack the session of another user. (CVE-2011-4718 / Bug #60491)

  • An error exists related to certificate validation, the ‘subjectAltName’ field and certificates containing NULL bytes. This error can allow spoofing attacks. (CVE-2013-4248)

Binary data 6997.prm
VendorProductVersionCPE
phpphpcpe:/a:php:php

Related

nessus 37
openvas 46
fedora 12
amazon 1
nvd 2
cve 2
f5 4
prion 2
ubuntucve 2
cvelist 2
slackware 1
checkpoint_advisories 1
veracode 1
ubuntu 1
mageia 1
debian 1
osv 1
securityvulns 5
redhat 2
centos 2
suse 2
ibm 4
oraclelinux 2
gentoo 1
cloudlinux 1
rosalinux 1
nessus
nessus
PHP 5.5.x < 5.5.3 Multiple Vulnerabilities
2013-08-21 00:00:00
Fedora 19 : php-5.5.3-1.fc19 (2013-14998)
2013-08-25 00:00:00
Amazon Linux AMI : php54 (ALAS-2013-224)
2013-10-01 00:00:00
openvas
openvas
Fedora Update for php FEDORA-2013-14998
2013-08-27 00:00:00
Fedora Update for php FEDORA-2013-14998
2013-08-27 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-224)
2015-09-08 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: php-5.5.3-1.fc19
2013-08-24 00:05:41
[SECURITY] Fedora 19 Update: php-5.5.7-1.fc19
2013-12-13 05:03:19
[SECURITY] Fedora 19 Update: php-5.5.11-1.fc19
2014-04-15 15:45:54
amazon
amazon
Medium: php54
2013-09-19 15:28:00
nvd
nvd
CVE-2011-4718
2013-08-13 15:04:18
CVE-2013-4248
2013-08-18 02:52:23
cve
cve
CVE-2011-4718
2022-10-03 16:15:13
CVE-2013-4248
2013-08-18 02:52:23
f5
f5
SOL14930 - PHP vulnerability CVE-2011-4718
2014-01-16 00:00:00
K14930 : PHP vulnerability CVE-2011-4718
2014-01-17 00:00:00
SOL14909 - OpenSSL vulnerability CVE-2013-4248
2014-01-15 00:00:00
prion
prion
Session fixation
2013-08-13 15:04:00
Design/Logic Flaw
2013-08-18 02:52:00
ubuntucve
ubuntucve
CVE-2011-4718
2013-08-13 00:00:00
CVE-2013-4248
2013-08-17 00:00:00
cvelist
cvelist
CVE-2011-4718
2022-10-03 16:15:13
CVE-2013-4248
2013-08-18 01:00:00
slackware
slackware
[slackware-security] php
2013-08-30 07:46:30
checkpoint_advisories
checkpoint_advisories
PHP SSL Certificate Validation Security Bypass (CVE-2013-4248)
2013-08-28 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-05-02 04:52:37
ubuntu
ubuntu
PHP vulnerability
2013-09-05 00:00:00
mageia
mageia
Updated php packages fix CVE-2013-4248 and prevent the two gd packages being installed at once
2013-08-30 21:30:10
debian
debian
[SECURITY] [DSA 2742-1] php5 security update
2013-08-26 19:50:29
osv
osv
php5 - interpretation conflict
2013-08-26 00:00:00
securityvulns
securityvulns
[ MDVSA-2013:221 ] php
2013-08-28 00:00:00
PHP / python certificate spoofing
2013-08-28 00:00:00
[ MDVSA-2014:014 ] php
2014-01-29 00:00:00
redhat
redhat
(RHSA-2013:1615) Moderate: php security, bug fix, and enhancement update
2013-11-21 00:00:00
(RHSA-2013:1307) Moderate: php53 security, bug fix and enhancement update
2013-09-30 16:52:28
centos
centos
php security update
2013-11-26 13:32:36
php53 security update
2013-10-07 12:42:03
suse
suse
Security update for PHP5 (important)
2014-07-05 02:05:05
Security update for PHP5 (important)
2014-07-07 19:04:42
ibm
ibm
Security Bulletin: Vulnerabilities in php5 affect IBM Flex System Manager (FSM): (CVE-2013-4248 CVE-2013-6420 CVE-2014-2497 CVE-2014-4049)
2019-01-31 01:30:01
Security Bulletin: Vulnerabilities in PHP affect IBM Chassis Management Module (CMM) (CVE-2013-4248, CVE-2013-6420, CVE-2014-2497, CVE-2014-4049)
2019-01-31 01:55:01
Security Bulletin: Network Intrusion Prevention System is affected by curl and php5 vulnerabilities (CVE-2013-2174, CVE-2014-0015, CVE-2014-0138, CVE-2014-0139, CVE-2013-4248, CVE-2013-6420, CVE-2014-2497, CVE-2014-4049)
2022-02-23 17:14:38
oraclelinux
oraclelinux
php security, bug fix, and enhancement update
2013-11-25 00:00:00
php53 security, bug fix and enhancement update
2013-10-02 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2014-08-29 00:00:00
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.029 Low

EPSS

Percentile

90.8%

JSON
Related for 6997.PRM
nessus37openvas46fedora12amazon1nvd2cve2f54prion2ubuntucve2cvelist2slackware1checkpoint_advisories1veracode1ubuntu1mageia1debian1osv1securityvulns5redhat2centos2suse2ibm4oraclelinux2gentoo1cloudlinux1rosalinux1