CVE:CVE-2015-4643
CNNVD:CNNVD-201506-416
PHP（PHP：Hypertext Preprocessor，PHP：超文本预处理器）是PHP Group和开放源代码社区共同维护的一种开源的通用计算机脚本语言。该语言主要用于Web开发，支持多种数据库及操作系统。
PHP的ext/ftp/ftp.c文件中的‘ftp_genlist’函数中存在整数溢出漏洞。远程攻击者可借助LIST命令较长的应答利用该漏洞执行任意代码。以下版本受到影响：PHP 5.4.42之前版本，5.5.26之前5.5.x版本，5.6.10之前5.6.x版本。（注：该漏洞源于CNNVD-201506-130补丁的不完全修复）
solution:Upgrade php php to a higher version than 5.4.42,5.5.26,5.6.10,and avoid the version (,5.4.42),[5.5.0,5.5.26),[5.6.0,5.6.10); Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.6,7.3,7.4,7.6,and avoid the version 6.6,7.3,7.4,7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.6,7.1,7.2,7.3,7.4,7.5,7.6,and avoid the version 6.6,7.1,7.2,7.3,7.4,7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 6.6,7.3,7.6,and avoid the version 6.6,7.3,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade oracle linux to a higher version than 6,7:0,and avoid the version 6,7:0