The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.3.

Mac OS X 10.6.3 contains security fixes for the following products :

  - AFP Server
  - Apache
  - CoreAudio
  - CoreMedia
  - CoreTypes
  - CUPS
  - DesktopServices
  - Disk Images
  - Directory Services
  - Dovecot
  - Event Monitor
  - FreeRADIUS
  - FTP Server
  - iChat Server
  - ImageIO
  - Image RAW
  - Libsystem
  - Mail
  - MySQL
  - OS Services
  - Password Server
  - PHP
  - Podcast Producer
  - Preferences
  - PS Normalizer
  - QuickTime
  - Ruby
  - Server Admin
  - SMB
  - Tomcat
  - Wiki Server
  - X11

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-002 applied.

This security update contains fixes for the following products :

  - AppKit
  - Application Firewall
  - AFP Server
  - Apache
  - ClamAV
  - CoreTypes
  - CUPS
  - curl
  - Cyrus IMAP
  - Cyrus SASL
  - Disk Images
  - Directory Services
  - Event Monitor
  - FreeRADIUS
  - FTP Server
  - iChat Server
  - Image RAW
  - Libsystem
  - Mail
  - Mailman
  - OS Services
  - Password Server
  - perl
  - PHP
  - PS Normalizer
  - Ruby
  - Server Admin
  - SMB
  - Tomcat
  - unzip
  - vim
  - Wiki Server
  - X11
  - xar

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-366:02 advisory.

    Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet     and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by     Sun under the Java Community Process.
    Tomcat is developed in an open and participatory environment and released under the Apache Software     License. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
    We invite you to participate in this open development project.
    Fixed bugs:
    CVE-2007-5333     Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly     handle (1) double quote () characters or (2) %5C (encoded backslash) sequences in a cookie value, which     might cause sensitive information such as session IDs to be leaked to remote attackers and enable session     hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.
    CVE-2008-5515     Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier     versions normalizes the target pathname before filtering the query string when using the RequestDispatcher     method, which allows remote attackers to bypass intended access restrictions and conduct directory     traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.
    CVE-2009-0033     Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP     connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service     (application outage) via a crafted request with invalid headers, related to temporary blocking of     connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host     header.
    CVE-2009-0580     Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM     authentication is used, allows remote attackers to enumerate valid usernames via requests to     /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1)     MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a %     (percent) value for the j_password parameter.
    CVE-2009-0781     Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples     web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18     allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to invalid     HTML.
    CVE-2009-0783     Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web     applications to replace an XML parser used for other web applications, which allows local users to read or     modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted     application that is loaded earlier than the target application.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update of tomcat fixes several vulnerabilities :

  - CVE-2008-5515: RequestDispatcher usage can lead to     information leakage

  - CVE-2009-0033: denial of service via AJP connection

  - CVE-2009-0580: some authentication classes allow user     enumeration

  - CVE-2009-0781: XSS bug in example application cal2.jsp

  - CVE-2009-0783: replacing XML parser leads to information     leakage Additionally, non-security bugs were fixed.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1164 advisory.

    Apache Tomcat is a servlet container for the Java Servlet and JavaServer     Pages (JSP) technologies.

    It was discovered that the Red Hat Security Advisory RHSA-2007:0871 did not     address all possible flaws in the way Tomcat handles certain characters and     character sequences in cookie values. A remote attacker could use this flaw     to obtain sensitive information, such as session IDs, and then use this     information for session hijacking attacks. (CVE-2007-5333)

    Note: The fix for the CVE-2007-5333 flaw changes the default cookie     processing behavior: with this update, version 0 cookies that contain     values that must be quoted to be valid are automatically changed to version     1 cookies. To reactivate the previous, but insecure behavior, add the     following entry to the /etc/tomcat5/catalina.properties file:

    org.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false

    It was discovered that request dispatchers did not properly normalize user     requests that have trailing query strings, allowing remote attackers to     send specially-crafted requests that would cause an information leak.
    (CVE-2008-5515)

    A flaw was found in the way the Tomcat AJP (Apache JServ Protocol)     connector processes AJP connections. An attacker could use this flaw to     send specially-crafted requests that would cause a temporary denial of     service. (CVE-2009-0033)

    It was discovered that the error checking methods of certain authentication     classes did not have sufficient error checking, allowing remote attackers     to enumerate (via brute force methods) usernames registered with     applications running on Tomcat when FORM-based authentication was used.
    (CVE-2009-0580)

    A cross-site scripting (XSS) flaw was found in the examples calendar     application. With some web browsers, remote attackers could use this flaw     to inject arbitrary web script or HTML via the time parameter.
    (CVE-2009-0781)

    It was discovered that web applications containing their own XML parsers     could replace the XML parser Tomcat uses to parse configuration files. A     malicious web application running on a Tomcat instance could read or,     potentially, modify the configuration and XML-based data of other web     applications deployed on the same Tomcat instance. (CVE-2009-0783)

    Users of Tomcat should upgrade to these updated packages, which contain     backported patches to resolve these issues. Tomcat must be restarted for     this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
45372	Mac OS X 10.6.x < 10.6.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2010/3/29	2024/5/28	critical
45373	Mac OS X Multiple Vulnerabilities (Security Update 2010-002)	Nessus	MacOS X Local Security Checks	2010/3/29	2024/5/28	critical
283896	MiracleLinux 3 : tomcat5-5.5.23-0jpp.7.2.1AXS3 (AXSA:2009-366:02)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	medium
40316	openSUSE Security Update : tomcat6 (tomcat6-999)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	medium
40342	RHEL 5 : tomcat (RHSA-2009:1164)	Nessus	Red Hat Local Security Checks	2009/7/22	2024/11/4	medium

偵測

搜尋 Plugin

critical

critical

medium

medium

medium