VMware ESX / ESXi 多個弱點 (VMSA-2009-0016) (遠端檢查)

critical Nessus Plugin ID 89117

概要

遠端主機缺少安全性相關修補程式。

說明

遠端 VMware ESX / ESXi 主機缺少安全性相關修補程式。
因此受到下列元件中的多個弱點影響,包括遠端程式碼執行弱點:

- Apache Geronimo
- Apache Tomcat
- Apache Xerces2
- cURL/libcURL
- ISC BIND
- Libxml2
- Linux kernel
- Linux kernel 64-bit
- Linux kernel Common Internet File System
- Linux kernel eCryptfs
- NTP
- Python
- Java Runtime Environment (JRE)
- Java SE Development Kit (JDK)
- Java SE Abstract Window Toolkit (AWT)
- Java SE Plugin
- Java SE Provider
- Java SE Swing
- Java SE Web Start

解決方案

根據與 ESX / ESXi 3.5 / 4.0 版有關的供應商公告,套用適當的修補程式。

另請參閱

https://www.vmware.com/security/advisories/VMSA-2009-0016

Plugin 詳細資訊

嚴重性: Critical

ID: 89117

檔案名稱: vmware_VMSA-2009-0016_remote.nasl

版本: 1.7

類型: remote

系列: Misc.

已發布: 2016/3/3

已更新: 2021/1/6

支援的感應器: Nessus

風險資訊

VPR

風險因素: Critical

分數: 9.5

CVSS v2

風險因素: Critical

基本分數: 10

時間分數: 8.7

媒介: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

弱點資訊

CPE: cpe:/o:vmware:esx, cpe:/o:vmware:esxi

必要的 KB 項目: Host/VMware/version, Host/VMware/release

可被惡意程式利用: true

可輕鬆利用: Exploits are available

修補程式發佈日期: 2009/11/20

弱點發布日期: 2007/3/31

可惡意利用

CANVAS (CANVAS)

Core Impact

Metasploit (Linux Kernel Sendpage Local Privilege Escalation)

參考資訊

CVE: CVE-2007-2052, CVE-2007-4965, CVE-2007-5333, CVE-2007-5342, CVE-2007-5461, CVE-2007-5966, CVE-2007-6286, CVE-2008-0002, CVE-2008-1232, CVE-2008-1721, CVE-2008-1887, CVE-2008-1947, CVE-2008-2315, CVE-2008-2370, CVE-2008-3142, CVE-2008-3143, CVE-2008-3144, CVE-2008-3528, CVE-2008-4307, CVE-2008-4864, CVE-2008-5031, CVE-2008-5515, CVE-2008-5700, CVE-2009-0028, CVE-2009-0033, CVE-2009-0159, CVE-2009-0269, CVE-2009-0322, CVE-2009-0580, CVE-2009-0675, CVE-2009-0676, CVE-2009-0696, CVE-2009-0745, CVE-2009-0746, CVE-2009-0747, CVE-2009-0748, CVE-2009-0778, CVE-2009-0781, CVE-2009-0783, CVE-2009-0787, CVE-2009-0834, CVE-2009-1072, CVE-2009-1093, CVE-2009-1094, CVE-2009-1095, CVE-2009-1096, CVE-2009-1097, CVE-2009-1098, CVE-2009-1099, CVE-2009-1100, CVE-2009-1101, CVE-2009-1102, CVE-2009-1103, CVE-2009-1104, CVE-2009-1105, CVE-2009-1106, CVE-2009-1107, CVE-2009-1192, CVE-2009-1252, CVE-2009-1336, CVE-2009-1337, CVE-2009-1385, CVE-2009-1388, CVE-2009-1389, CVE-2009-1439, CVE-2009-1630, CVE-2009-1633, CVE-2009-1895, CVE-2009-2406, CVE-2009-2407, CVE-2009-2414, CVE-2009-2416, CVE-2009-2417, CVE-2009-2625, CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2675, CVE-2009-2676, CVE-2009-2692, CVE-2009-2698, CVE-2009-2716, CVE-2009-2718, CVE-2009-2719, CVE-2009-2720, CVE-2009-2721, CVE-2009-2722, CVE-2009-2723, CVE-2009-2724, CVE-2009-2847, CVE-2009-2848

BID: 23887, 25696, 26070, 26880, 27006, 27703, 27706, 28715, 28749, 29502, 30491, 30494, 30496, 31932, 33187, 33237, 33412, 33428, 33618, 33846, 33906, 33951, 34084, 34205, 34216, 34240, 34390, 34405, 34453, 34481, 34612, 34673, 34934, 35017, 35185, 35193, 35196, 35263, 35281, 35416, 35559, 35647, 35848, 35850, 35851, 35922, 35929, 35930, 35939, 35943, 35944, 35946, 35958, 36010, 36032, 36038, 36108, 49470

CWE: 119, 16, 189, 20, 200, 22, 264, 310, 362, 399, 79, 94

VMSA: 2009-0016