Three remote DoS vulnerabilities have been fixed in OpenSSL: a DTLS epoch record buffer memory DoS (CVE-2009-1377), a DTLS fragment handling memory DoS (CVE-2009-1378) and a DTLS fragment read after a free DoS. (CVE-2009-1379)

a. vMA and Service Console update for newt to 0.52.2-12.el5_4.1

   Newt is a programming library for color text mode, widget based    user interfaces. Newt can be used to add stacked windows, entry    widgets, checkboxes, radio buttons, labels, plain text fields,    scrollbars, etc., to text mode user interfaces.

   A heap-based buffer overflow flaw was found in the way newt    processes content that is to be displayed in a text dialog box.
   A local attacker could issue a specially crafted text dialog box    display request (direct or via a custom application), leading to a    denial of service (application crash) or, potentially, arbitrary    code execution with the privileges of the user running the    application using the newt library.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-2905 to this issue.

b. vMA and Service Console update for vMA package nfs-utils to    1.0.9-42.el5

   The nfs-utils package provides a daemon for the kernel NFS server    and related tools.

   It was discovered that nfs-utils did not use tcp_wrappers    correctly.  Certain hosts access rules defined in '/etc/hosts.allow'    and '/etc/hosts.deny' may not have been honored, possibly allowing    remote attackers to bypass intended access restrictions.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2008-4552 to this issue.

c. vMA and Service Console package glib2 updated to 2.12.3-4.el5_3.1

   GLib is the low-level core library that forms the basis for    projects such as GTK+ and GNOME. It provides data structure    handling for C, portability wrappers, and interfaces for such    runtime functionality as an event loop, threads, dynamic loading,    and an object system.

   Multiple integer overflows in glib/gbase64.c in GLib before 2.20    allow context-dependent attackers to execute arbitrary code via a    long string that is converted either from or to a base64    representation.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2008-4316 to this issue.

d. vMA and Service Console update for openssl to 0.9.8e-12.el5

   SSL is a toolkit implementing SSL v2/v3 and TLS protocols with full-    strength cryptography world-wide.

   Multiple denial of service flaws were discovered in OpenSSL's DTLS    implementation. A remote attacker could use these flaws to cause a    DTLS server to use excessive amounts of memory, or crash on an    invalid memory access or NULL pointer dereference.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the names CVE-2009-1377, CVE-2009-1378,    CVE-2009-1379, CVE-2009-1386, CVE-2009-1387 to these issues.

   An input validation flaw was found in the handling of the BMPString    and UniversalString ASN1 string types in OpenSSL's    ASN1_STRING_print_ex() function. An attacker could use this flaw to    create a specially crafted X.509 certificate that could cause    applications using the affected function to crash when printing    certificate contents.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-0590 to this issue.

e. vMA and Service Console package bind updated to 9.3.6-4.P1.el5_4.1

   It was discovered that BIND was incorrectly caching responses    without performing proper DNSSEC validation, when those responses    were received during the resolution of a recursive client query    that requested DNSSEC records but indicated that checking should be    disabled. A remote attacker could use this flaw to bypass the DNSSEC    validation check and perform a cache poisoning attack if the target    BIND server was receiving such client queries.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-4022 to this issue.

f. vMA and Service Console package expat updated to 1.95.8-8.3.el5_4.2.

   Two buffer over-read flaws were found in the way Expat handled    malformed UTF-8 sequences when processing XML files. A specially-    crafted XML file could cause applications using Expat to fail while    parsing the file.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the names CVE-2009-3560 and CVE-2009-3720 to these    issues.

g. vMA and Service Console package openssh update to 4.3p2-36.el5_4.2

   A Red Hat specific patch used in the openssh packages as shipped in    Red Hat Enterprise Linux 5.4 (RHSA-2009:1287) loosened certain    ownership requirements for directories used as arguments for the    ChrootDirectory configuration options. A malicious user that also    has or previously had non-chroot shell access to a system could    possibly use this flaw to escalate their privileges and run    commands as any system user.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-2904 to this issue.

h. vMA and Service Console package ntp updated to    ntp-4.2.2p1-9.el5_4.1.i386.rpm

   A flaw was discovered in the way ntpd handled certain malformed NTP    packets. ntpd logged information about all such packets and replied    with an NTP packet that was treated as malformed when received by    another ntpd. A remote attacker could use this flaw to create an NTP    packet reply loop between two ntpd servers through a malformed packet    with a spoofed source IP address and port, causing ntpd on those    servers to use excessive amounts of CPU time and fill disk space with    log messages.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-3563 to this issue.   

i. vMA update for package kernel to 2.6.18-164.9.1.el5

   Updated vMA package kernel addresses the security issues listed    below.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2009-2849 to the security issue fixed in    kernel 2.6.18-128.2.1

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2009-2695, CVE-2009-2908, CVE-2009-3228,    CVE-2009-3286, CVE-2009-3547, CVE-2009-3613 to the security issues    fixed in kernel 2.6.18-128.6.1

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2009-3612, CVE-2009-3620, CVE-2009-3621,    CVE-2009-3726 to the security issues fixed in kernel    2.6.18-128.9.1

j. vMA 4.0 updates for the packages kpartx, libvolume-id,    device-mapper-multipath, fipscheck, dbus, dbus-libs, and ed

   kpartx updated to 0.4.7-23.el5_3.4, libvolume-id updated to    095-14.20.el5 device-mapper-multipath package updated to    0.4.7-23.el5_3.4, fipscheck updated to 1.0.3-1.el5, dbus    updated to 1.1.2-12.el5, dbus-libs updated to 1.1.2-12.el5,    and ed package updated to 0.2-39.el5_2.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the names CVE-2008-3916, CVE-2009-1189 and    CVE-2009-0115 to these issues.

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries :

  - bind
  - expat
  - glib2
  - Kernel
  - newt
  - nfs-utils
  - NTP
  - OpenSSH
  - OpenSSL

根據其自我報告的版本號碼，遠端主機上安裝的 HP System Management Homepage 版本比 6.0.0.96 / 6.0.0-95 舊。這些版本可能受到以下弱點影響：

  - 由於未能處理 UTF-7 編碼輸入導致的跨網站指令碼 (XSS) 弱點。只有在編碼設定為自動選取時，瀏覽器才會受到影響。
    (CVE-2008-1468)

  - libxml2 程式庫中有一個整數溢位弱點，可導致堆積溢位。(CVE-2008-4226)

  - PHP mbstring 延伸模組中有一個緩衝區溢位。
    (CVE-2008-5557)

  - 在啟用「display_errors」的情況下，PHP 中有一個不明的 XSS。(CVE-2008-5814)

  - OpenSSL DTLS 中存在多個拒絕服務弱點。(CVE-2009-1377、CVE-2009-1378、CVE-2009-1379、CVE-2009-1386、CVE-2009-1387)

  - 由於未能清理「/proxy/smhu/getuiinfo」的「servercert」參數的輸入內容，導致跨網站指令碼弱點。(CVE-2009-4185)

  - 有一個不明弱點，允許攻擊者存取敏感資訊、修改資料或造成拒絕服務。(CVE-2010-1034)

執行 CORE 5.04 / MAIN 5.04 版的遠端 NewStart CGSL 主機安裝了受多個弱點影響的 openssl 套件：- OpenSSL 1.0.2 (從 1.0.2b 版開始) 引入一種錯誤狀態機制。意圖是，如果在交握期間發生嚴重錯誤，則 OpenSSL 將會移至錯誤狀態，如果您嘗試繼續交握，則會立即失敗。這適用於明確的交握函式 (SSL_do_handshake()、SSL_accept() 和 SSL_connect())，但是，由於發生錯誤的緣故，如果直接呼叫 SSL_read() 或 SSL_write()，則無法正確運作。在該情況下，如果交握失敗，則在初始函式呼叫中將會傳回嚴重錯誤。如果之後應用程式針對相同的 SSL 物件呼叫 SSL_read()/SSL_write()，則會成功傳遞資料，而無須直接從 SSL/TLS 記錄層進行解密/加密。若要惡意利用此問題，則必須存在一個應用程式錯誤，此錯誤會導致在收到嚴重錯誤之後，對 SSL_read()/SSL_write() 發出呼叫。OpenSSL 1.0.2b-1.0.2m 版會受到影響。已在 OpenSSL 1.0.2n 中修正。OpenSSL 1.1.0 不會受到影響。(CVE-2017-3737) - 在用於具有 1024 位元模數之乘冪的 AVX2 Montgomery 乘法程序中有一個溢位錯誤。EC 演算法未受到影響。分析資料指出，因此缺陷而對 RSA 與 DSA 所發動的攻擊極難執行，而且可能性不高。對 DH1024 發動攻擊是可行的，因為推算私密金鑰相關資訊所需的多數工作可以於離線執行。此類攻擊所需的資源量極大。但是，若要讓對 TLS 的攻擊有意義，伺服器必須在多個用戶端之間共用 DH1024 私密金鑰，自 CVE-2016-0701 以來已無此選項。這只會影響支援 AVX2 的處理器，但不會影響支援 ADX 延伸的處理器，如 Intel Haswell (第 4 代)。注意：此問題的影響類似於 CVE-2017-3736、CVE-2017-3732 和 CVE-2015-3193。OpenSSL 1.0.2-1.0.2m 和 1.1.0-1.1.0g 版受到影響。已在 OpenSSL 1.0.2n 中修正。由於此問題的嚴重性低，因此我們目前不會發佈新版本的 OpenSSL 1.1.0。此修正在可用時將包含在 OpenSSL 1.1.0h 中。此修正也可在 OpenSSL git 存放庫的認可 e502cc86d 中使用。(CVE-2017-3738) - 在比 1.0.2m 舊及比 1.1.0g 舊的 OpenSSL 1.1.0 中，x86_64 Montgomery 平方程序中有進位傳播錯誤情形。EC 演算法未受到影響。分析資料指出，因此缺陷而對 RSA 與 DSA 所發動的攻擊極難執行，而且可能性不高。對 DH 發動攻擊是可行的 (但難度極高)，因為推算私密金鑰相關資訊所需的多數工作可以於離線執行。此類攻擊所需的資源量極大，而且只限極少數的攻擊者可以存取。在具有持續 DH 參數且多個用戶端共用一組私密金鑰的情況下，攻擊者還需額外使用目標私密金鑰，於線上存取未經修補的系統。這只會影響支援 BMI1、BMI2 及 ADX 延伸的處理器，如 Intel Broadwell (第 5 代) 及更新版本，或 AMD Ryzen。(CVE-2017-3736) - 0.9.7l 之前的 OpenSSL 0.9.7 和 0.9.8d 之前的 0.9.8 可讓遠端攻擊者透過觸發不當處理的錯誤情況之格式錯誤的 ASN.1 結構造成拒絕服務 (無限迴圈與記憶體耗用)。(CVE-2006-2937) - 0.9.7l 之前的 OpenSSL 0.9.7 和 0.9.8d 之前的 0.9.8 及更舊版本可讓攻擊者透過具有下列兩種特性的依附性公開金鑰而造成拒絕服務 (CPU 耗用)：X.509 憑證中有大的 (1) 公開指數或 (2) 公用模數值，使用 RSA 簽章驗證時，上述兩種特性的公開金鑰都需耗費更長的處理時間。(CVE-2006-2940) - 在 0.9.7l 之前的 OpenSSL 0.9.7、0.9.8d 之前的 0.9.8 及更舊的版本中，SSL_get_shared_ciphers 函式有緩衝區溢位問題，會造成不明影響，且遠端攻擊向量有加密長清單。(CVE-2006-3738) - 在 0.9.7 之前的 OpenSSL、0.9.7k 之前的 0.9.7 和 0.9.8c 之前的 0.9.8 中，若使用指數為 3 的 RSA 金鑰，會在產生雜湊之前移除 PKCS-1 填補，遠端攻擊者因而得以偽造該 RSA 金鑰簽署的 PKCS #1 v1.5 簽章並使 OpenSSL 無法正確地驗證 X.509 和使用 PKCS #1 的其他憑證。(CVE-2006-4339) - 在 0.9.7l 之前的 OpenSSL 0.9.7、0.9.8d 之前的 0.9.8 及更舊的版本中，SSLv2 用戶端程式碼的 get_server_hello 函式可讓遠端攻擊者透過會觸發 null 指標解除參照的不明向量，造成拒絕服務 (用戶端當機)。(CVE-2006-4343) - 在 OpenSSL 0.9.8e 及更舊的版本中，crypto/bn/bn_mont.c 的 BN_from_montgomery 函式未正確計算 Montgomery 乘法，此問題可讓本機使用者發動旁路攻擊並擷取 RSA 私密金鑰。(CVE-2007-3108) - 在 0.9.8f 之前的 OpenSSL 0.9.8 中，DTLS 實作存在差一錯誤，可讓遠端攻擊者透過不明向量執行任意程式碼。(CVE-2007-4995) - 在 OpenSSL 0.9.7 版到 0.9.7l 版和 0.9.8 版到 0.9.8f 版中，SSL_get_shared_ciphers 函式存在差一錯誤，可讓遠端攻擊者透過觸發一位元組的緩衝區反向溢位之特製的封包執行任意程式碼。注意：此問題在 CVE-2006-3738 修正之後出現。截止 20071012，不清楚是否可執行程式碼。(CVE-2007-5135) - OpenSSL 0.9.8f 和 0.9.8g 中有雙重釋放弱點，啟用 TLS 伺服器名稱擴充時，遠端攻擊者得以透過格式錯誤的 Client Hello 封包造成拒絕服務 (當機)。注意： 上述詳細資料中有部分是來自第三方資訊。(CVE-2008-0891) - OpenSSL 0.9.8f 和 0.9.8g 讓遠端攻擊者得以透過 TLS 交握而省略 Server Key Exchange 訊息，並使用特定的加密套件，藉此造成拒絕服務 (當機)，觸發 NULL 指標解除參照。(CVE-2008-1672) - 在 OpenSSL 0.9.8k 及更舊的 0.9.8 版中，ssl/d1_pkt.c 的 dtls1_buffer_record 函式讓遠端攻擊者得以透過一系列大型的待處理 epoch DTLS 記錄 (在佇列中緩衝) 造成拒絕服務 (記憶體耗用)，此弱點又稱為 DTLS 記錄緩衝區限制錯誤。(CVE-2009-1377) - 在 OpenSSL 0.9.8k 及更舊的 0.9.8 版本中，ssl/d1_both.c 的 dtls1_process_out_of_seq_message 函式有多個記憶體洩漏，遠端攻擊者因而得以透過下列 DTLS 記錄造成拒絕服務 (記憶體耗用)：(1) 重複的 DTLS 記錄或 (2) 其序號遠大於目前序號的 DTLS 記錄，此弱點又稱為 DTLS 片段處理記憶體洩漏。(CVE-2009-1378) - 在 OpenSSL 1.0.0 Beta 2 中，ssl/d1_both.c 的 dtls1_retrieve_buffered_fragment 函式有釋放後使用弱點，遠端攻擊者因而得以透過 DTLS 封包造成拒絕服務 (openssl s_client 當機) 甚或造成其他不明影響，從使用特製伺服器憑證的伺服器傳來的封包即為一例。(CVE-2009-1379) - Microsoft Internet Information Services (IIS) 7.0 中所用的 TLS 通訊協定和 SSL 通訊協定 3.0 (更舊版本可能亦然)、Apache HTTP Server 2.2.14 及更舊版本中的 mod_ssl、0.9.8l 之前的 OpenSSL、GnuTLS 2.8.5 及更舊版本、Mozilla Network Security Services (NSS) 3.12.4 及更舊版本、多項 Cisco 產品及其他產品未正確將重新交涉的交握與現有連線聯結，攔截式攻擊者因而得以透過傳送未經驗證的要求 (此要求在重新交涉後內容中由伺服器以回溯性方式處理)，將資料插入 HTTPS 工作階段甚或受 TLS 或 SSL 保護的其他類型之工作階段，這與純文字插入攻擊相關，又稱為「Project Mogul」問題。(CVE-2009-3555) - 在 OpenSSL 0.9.8l 及更舊版本和 1.0.0 Beta 版到 Beta 4 版中，crypto/comp/c_zlib.c 的 zlib_stateful_finish 函式有記憶體洩漏弱點，遠端攻擊者因而得以透過會觸發不正確呼叫 CRYPTO_cleanup_all_ex_data 函式的向量，造成拒絕服務 (記憶體耗用)，使用 SSLv3 和 PHP 的 Apache HTTP Server 即為一例，此問題與 CVE-2008-1678 相關。(CVE-2009-4355) - 在 0.9.8o 之前的 OpenSSL 和 1.0.0a 之前的 1.x 版中，crypto/cms/cms_asn1.c 的 Cryptographic Message Syntax (CMS) 實作未正確處理含 OriginatorInfo 的結構，內容相依的攻擊者因而得以透過不明向量來修改無效的記憶體位置或發動雙重釋放攻擊，也可能執行任意程式碼。(CVE-2010-0742) - 在 1.0.0a 之前的 OpenSSL 1.x 版中，EVP_PKEY_verify_recover 函式出現 RSA 驗證還原問題 (pkeyutl 及可能其他應用程式所用) 會在失敗時傳回未初始化的記憶體，內容相依的攻擊者因而得以透過不明向量繞過預定的金鑰要求或取得敏感資訊。注意： 上述詳細資料中有部分是來自第三方資訊。(CVE-2010-1633) - 在 OpenSSL 0.9.8f 到 0.9.8o、1.0.0 和 1.0.0a 中，當 TLS 伺服器上的多執行緒和內部快取處理啟用時，ssl/t1_lib.c 會出現多個爭用情形，遠端攻擊者因而得以透過可觸發堆積型緩衝區溢位問題的用戶端資料來執行任意程式碼，此問題與 (1) TLS 伺服器名稱擴充和 (2) 橢圓曲線密碼編譯相關。(CVE-2010-3864) - 0.9.8q 之前的 OpenSSL 和 1.0.0c 之前的 1.0.x 版在 SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG 啟用的情況下，未妥善防止工作階段快取中的加密套件修改，遠端攻擊者因而得以透過涉及探查網路流量的向量，找出工作階段識別碼，進而強制降級到非預定的加密法。(CVE-2010-4180) - 在 OpenSSL 0.9.8h 到 0.9.8q 和 1.0.0 到 1.0.0c 中，ssl/t1_lib.c 讓遠端攻擊者得以透過格式錯誤的 ClientHello 交握訊息 (此訊息會觸發越界記憶體存取)，造成拒絕服務 (當機)，甚或可能從使用 OpenSSL 的應用程式中取得敏感資訊，此弱點又稱為「OCSP 裝訂」弱點。(CVE-2011-0014) - 在 1.0.0e 之前的 OpenSSL 1.0.x 版中，crypto/x509/x509_vfy.c 未初始化某些結構成員，遠端攻擊者因而得以更輕鬆地藉由使用與過去某個時間點對應的 nextUpdate 值來繞過 CRL 驗證。(CVE-2011-3207) - OpenSSL 0.9.8s 和 1.0.0f 無法正確支援 DTLS 應用程式，遠端攻擊者因而得以透過與越界讀取相關的不明向量，造成拒絕服務 (當機)。注意：此弱點之所以存在，是因為 CVE-2011-4108 的修正不正確。(CVE-2012-0050) - 在 0.9.8v 之前的 OpenSSL、1.0.0i 之前的 1.0.0 和 1.0.1a 之前的 1.0.1 中，crypto/asn1/a_d2i_fp.c 的 asn1_d2i_read_bio 函式未正確解譯整數資料，遠端攻擊者因而得以透過特製的 DER 資料發動緩衝區溢位攻擊，造成拒絕服務 (記憶體損毀) 甚或造成其他不明影響，X.509 憑證或 RSA 公開金鑰即為一例。(CVE-2012-2110) - 在 1.0.1f 之前的 OpenSSL 1.0.1 中，ssl/s3_both.c 的 ssl3_take_mac 函式讓遠端 TLS 伺服器得以透過 TLS 交握中的特製 Next Protocol Negotiation 記錄，造成拒絕服務 (NULL 指標解除參照和應用程式損毀)。(CVE-2013-4353) - 在 1.0.2 之前的 OpenSSL 中，ssl/s3_lib.c 的 ssl_get_algorithm2 函式可從錯誤的資料結構取得特定版本號碼，進而允許遠端攻擊者透過來自 TLS 1.2 用戶端的特製流量造成拒絕服務 (程序損毀)。(CVE-2013-6449) - 在 1.0.0l 之前的 OpenSSL 1.0.0 和 1.0.1f 之前的 1.0.1 中，DTLS 重新傳輸實作未正確維護摘要和加密內容的資料結構，攔截式攻擊者因而得以透過干擾與 ssl/d1_both.c 和 ssl/t1_enc.c 相關之封包傳遞的方式，觸發其他內容的使用並造成拒絕服務 (應用程式損毀)。(CVE-2013-6450) - 在 OpenSSL 處理 TLS 和 DTLS Heartbeat Extension 封包的方式中發現資訊洩漏的缺陷。惡意 TLS 或 DTLS 用戶端或伺服器可傳送特製的 TLS 或 DTLS Heartbeat 封包，進而從連接的用戶端或伺服器進行要求時洩漏有限的記憶體。請注意：記憶體的洩漏部分可能包含像是私密金鑰的敏感資訊。(CVE-2014-0160) - 在加密區塊鏈結 (CBC) 模式下解密使用區塊加密法加密的訊息時，在 SSL 3.0 處理填補位元組的方式中發現一個缺陷。攔截式 (MITM) 攻擊者若能夠強制受影響的應用程式透過新建立的 SSL 3.0 連線重複傳送相同資料，此缺陷即可讓其嘗試解密所選的加密文字位元組 256 次。(CVE-2014-3566) - 在 TLS/SSL 通訊協定使用 DES/3DES 加密的方式中發現缺陷。攔截式攻擊者可利用此缺陷，透過擷取大量 TLS/SSL 伺服器與用戶端間大量加密流量 (若通訊使用 DES/3DES 式加密套件) 的方式，取得一些純文字資料。(CVE-2016-2183) 請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

根據其標題，遠端 Web 伺服器使用的 OpenSSL 版本比 0.9.8m 舊。這些版本存有以下弱點：

  - 工作階段重新交涉處理不當，攻擊者可利用此弱點發動攔截式攻擊，插入任意純文字。(CVE-2009-3555)

  - 程式庫不會檢查是否有從呼叫傳回至 bn_wexpand() 函式的 NULL 值，此情況具有不明影響。
    (CVE-2009-3245)    
  - crypto/comp/c_zlib.c 中的 zlib_stateful_finish 函式存在記憶體洩漏弱點，遠端攻擊者可以藉由向量觸發對 CRYPTO_cleanup_all_ex_data 函式的錯誤呼叫，進而造成拒絕服務。
    (CVE-2008-1678、CVE-2009-4355) 若要惡意利用此弱點，必須啟用 OpenSSL 的 SSL/TLS 連線的壓縮功能。

a. COS 核心的服務主控台更新

   更新版 COS 套件「核心」解決了已在 2.6.18-164.11.1 版中修正的安全性問題。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.org) 已指派名稱 CVE-2009-2695、CVE-2009-2908、CVE-2009-3228、CVE-2009-3286、CVE-2009-3547、CVE-2009-3613 給核心 2.6.18-164.6.1 中修正的安全性問題

   Common Vulnerabilities and Exposures 專案 (cve.mitre.org) 已指派名稱 CVE-2009-3612、CVE-2009-3620、CVE-2009-3621、CVE-2009-3726 給核心 2.6.18-164.9.1 中修正的安全性問題。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.org) 已指派名稱 CVE-2007-4567、CVE-2009-4536、CVE-2009-4537、CVE-2009-4538 給核心 2.6.18-164.10.1 中修正的安全性問題

   Common Vulnerabilities and Exposures 專案 (cve.mitre.org) 已指派名稱 CVE-2006-6304、CVE-2009-2910、CVE-2009-3080、CVE-2009-3556、CVE-2009-3889、CVE-2009-3939、CVE-2009-4020、CVE-2009-4021、CVE-2009-4138、CVE-2009-4141 和 CVE-2009-4272 給核心 2.6.18-164.11.1 中修正的安全性問題。

b. ntp 的 ESXi userworld 更新

   網路時間通訊協定 (NTP) 可用來同步電腦用戶端或伺服器和其他伺服器或參照時間來源的時間。

   ntpd 中有一個弱點，可允許遠端攻擊者使用 MODE_PRIVATE 傳送偽造的 (1) 要求或 (2) 回應封包，觸發兩個 NTP 程序之間持續交換 MODE_PRIVATE 錯誤回應，進而造成拒絕服務 (CPU 和頻寬消耗)。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.Org) 已為此問題指派名稱 CVE-2009-3563。

c. 服務主控台套件 openssl 已更新至 0.9.8e-12.el5_4.1

   OpenSSL 是一套以全球全長密碼編譯實作 SSL v2/v3 和 TLS 通訊協定的工具組。

   zlib 中有一個記憶體洩漏，可允許遠端攻擊者透過向量觸發不正確的 CRYPTO_cleanup_all_ex_data 函式呼叫，進而造成拒絕服務 (記憶體消耗)。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.Org) 已為此問題指派名稱 CVE-2009-4355。

   據發現，有一個弱點可允許遠端攻擊者利用 MD2 設計瑕疵產生少於暴力密碼破解時間的雜湊衝突，從而偽造憑證。注意：此問題的範圍目前受到限制，因為所需的運算量仍然很大。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.Org) 已為此問題指派名稱 CVE-2009-2409。

   此更新也納入了首先在 openssl-0.9.8e-12.el5.i386.rpm 版中解決的安全性修正。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.org) 已指派名稱 CVE-2009-0590、CVE-2009-1377、CVE-2009-1378、CVE-2009-1379、CVE-2009-1386 和 CVE-2009-1387 給這些問題。

d. krb5 的服務主控台已更新至 1.6.1-36.el5_4.1，pam_krb5 的服務主控台至已更新至 2.2.14-15。

   Kerberos 是一種網路驗證通訊協定。其設計旨在透過私密金鑰密碼編譯，為用戶端/伺服器應用程式提供強式驗證。

   crypto 程式庫中的 AES 和 RC4 功能有多個整數反向溢位，可允許遠端攻擊者針對密碼文字提供過短而無效的字元長度，造成拒絕服務 (程序損毀) 或可能執行任意程式碼。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.Org) 已為此問題指派名稱 CVE-2009-4212。

   pam_krb5 的服務主控台套件已更新至 pam_krb5-2.2.14-15 版。此更新修正了在 pam_krb5 中發現的一個瑕疵。在部分非預設組態中 (具體而言，pam_krb5 將是第一個用於提示輸入密碼的模組)，遠端攻擊者可利用此瑕疵辨識有效的使用者名稱，其可協助發動字典型密碼猜測攻擊。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.Org) 已為此問題指派名稱 CVE-2009-1384。

e. 服務主控台套件 bind 已更新至 9.3.6-4.P1.el5_4.2

   BIND (Berkeley Internet Name Daemon) 是目前網際網路上最廣泛使用的網域名稱系統 (DNS) 軟體。

   據發現，有一個弱點可允許遠端攻擊者將經驗證的資料 (AD) 旗標新增至現有網域的偽造的 NXDOMAIN 回應。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.Org) 已為此問題指派名稱 CVE-2010-0097。

   據發現，有一個弱點可允許遠端攻擊者接收遞迴用戶端查詢，並傳送含有 CNAME 或 DNAME 記錄的回應，而其在快取前不會進行預定的驗證，因此可發動 DNS 快取毒害攻擊。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.Org) 已為此問題指派名稱 CVE-2010-0290。

   在 bind 處理隨附安全回應且未從原始來源重新擷取的負責範圍外資料的方式中發現一個弱點，其可允許遠端攻擊者透過特製回應帶來不明影響。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.Org) 已為此問題指派名稱 CVE-2010-0382。

   注意：ESX 預設為不使用 BIND 名稱服務程序。

f. 服務主控台套件 gcc 已更新至 3.2.3-60

   GNU 編譯器集合包含 C、C++、Objective-C、Fortran、Java 和 Ada 前端，以及這些語言的程式庫

   GNU Libtool 的 ltdl.c 嘗試在目前的工作目錄中開啟 .la 程式庫檔案。此可允許本機使用者透過特洛伊木馬程式檔案取得權限。ESX 中提供的 GNU C 編譯器集合 (gcc) 含有一個靜態連結且有弱點的程式庫版本，即將遭到取代。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.Org) 已為此問題指派名稱 CVE-2009-3736。

g. 服務主控台套件 gzip 已更新至 1.3.3-15.rhel3

   gzip 是一種用於檔案壓縮的軟體應用程式

   64 位元平台上 gzip 的 unlzw 函式有一個整數反向溢位，其可允許遠端攻擊者透過特製的 LZW 壓縮檔，觸發陣列索引錯誤而導致拒絕服務 (應用程式損毀)，或是可能執行任意程式碼。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.Org) 已為此問題指派名稱 CVE-2010-0001。

h. 服務主控台套件 sudo 已更新至 1.6.9p17-6.el5_4

   Sudo (su 'do') 允許系統管理員委派授權單位授予特定使用者 (或使用者群組)，以 root 或其他使用者身分執行部分 (或全部) 命令的權限，同時提供命令稽核線索及其引數。

   虛擬命令已啟用時，sudo 允許比對虛擬命令和任意目錄中可執行檔的名稱，其允許本機使用者透過特製的可執行檔取得權限。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.Org) 已為此問題指派名稱 CVE-2010-0426。

   使用 runas_default 選項時，sudo 未正確設定群組成員資格，其允許本機使用者透過 sudo 命令取得權限。

   Common Vulnerabilities and Exposures 專案 (cve.mitre.Org) 已為此問題指派名稱 CVE-2010-0427。

According to its banner, the remote server is running a version of OpenSSL 1.0.0 prior to 1.0.0 beta 2.

A remote attacker can crash the server by sending an out-of-sequence DTLS handshake message.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1335 advisory.

  - openssl: mime_hdr_cmp NULL dereference crash (CVE-2006-7250)

  - openssl: ASN1 printing crash (CVE-2009-0590)

  - OpenSSL: DTLS epoch record buffer memory DoS (CVE-2009-1377)

  - OpenSSL: DTLS fragment handling memory DoS (CVE-2009-1378)

  - OpenSSL: DTLS pointer use-after-free flaw (DoS) (CVE-2009-1379)

  - openssl: DTLS NULL deref crash on early ChangeCipherSpec request (CVE-2009-1386)

  - openssl: DTLS out-of-sequence message handling NULL deref DoS (CVE-2009-1387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Three remote DoS vulnerabilities have been fixed in OpenSSL: a DTLS epoch record buffer memory DoS (CVE-2009-1377), a DTLS fragment handling memory DoS (CVE-2009-1378) and a DTLS fragment read after a free DoS (CVE-2009-1379).

Security update fixing DoS bugs in DTLS code. CVE-2009-1377 CVE-2009-1378 CVE-2009-1379

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200912-01 (OpenSSL: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in OpenSSL:
    Marsh Ray of PhoneFactor and Martin Rex of SAP independently     reported that the TLS protocol does not properly handle session     renegotiation requests (CVE-2009-3555).
    The MD2 hash algorithm is no longer considered to be     cryptographically strong, as demonstrated by Dan Kaminsky. Certificates     using this algorithm are no longer accepted (CVE-2009-2409).
    Daniel Mentz and Robin Seggelmann reported the following     vulnerabilities related to DTLS: A use-after-free flaw (CVE-2009-1379)     and a NULL pointer dereference (CVE-2009-1387) in the     dtls1_retrieve_buffered_fragment() function in src/d1_both.c, multiple     memory leaks in the dtls1_process_out_of_seq_message() function in     src/d1_both.c (CVE-2009-1378), and a processing error related to a     large amount of DTLS records with a future epoch in the     dtls1_buffer_record() function in ssl/d1_pkt.c     (CVE-2009-1377).
  Impact :

    A remote unauthenticated attacker, acting as a Man in the Middle, could     inject arbitrary plain text into a TLS session, possibly leading to the     ability to send requests as if authenticated as the victim. A remote     attacker could furthermore send specially crafted DTLS packages to a     service using OpenSSL for DTLS support, possibly resulting in a Denial     of Service. Also, a remote attacker might be able to create rogue     certificates, facilitated by a MD2 collision. NOTE: The amount of     computation needed for this attack is still very large.
  Workaround :

    There is no known workaround at this time.

New openssl packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openssl098e packages installed that are affected by multiple vulnerabilities:

  - OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d     allows remote attackers to cause a denial of service     (infinite loop and memory consumption) via malformed     ASN.1 structures that trigger an improperly handled     error condition. (CVE-2006-2937)

  - OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and     earlier versions allows attackers to cause a denial of     service (CPU consumption) via parasitic public keys with     large (1) public exponent or (2) public modulus     values in X.509 certificates that require extra time to     process when using RSA signature verification.
    (CVE-2006-2940)

  - Buffer overflow in the SSL_get_shared_ciphers function     in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and     earlier versions has unspecified impact and remote     attack vectors involving a long list of ciphers.
    (CVE-2006-3738)

  - OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8     before 0.9.8c, when using an RSA key with exponent 3,     removes PKCS-1 padding before generating a hash, which     allows remote attackers to forge a PKCS #1 v1.5     signature that is signed by that RSA key and prevents     OpenSSL from correctly verifying X.509 and other     certificates that use PKCS #1. (CVE-2006-4339)

  - The get_server_hello function in the SSLv2 client code     in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and     earlier versions allows remote servers to cause a denial     of service (client crash) via unknown vectors that     trigger a null pointer dereference. (CVE-2006-4343)

  - The BN_from_montgomery function in crypto/bn/bn_mont.c     in OpenSSL 0.9.8e and earlier does not properly perform     Montgomery multiplication, which might allow local users     to conduct a side-channel attack and retrieve RSA     private keys. (CVE-2007-3108)

  - Off-by-one error in the DTLS implementation in OpenSSL     0.9.8 before 0.9.8f allows remote attackers to execute     arbitrary code via unspecified vectors. (CVE-2007-4995)

  - Off-by-one error in the SSL_get_shared_ciphers function     in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f,     might allow remote attackers to execute arbitrary code     via a crafted packet that triggers a one-byte buffer     underflow. NOTE: this issue was introduced as a result     of a fix for CVE-2006-3738. As of 20071012, it is     unknown whether code execution is possible.
    (CVE-2007-5135)

  - OpenSSL 0.9.8i and earlier does not properly check the     return value from the EVP_VerifyFinal function, which     allows remote attackers to bypass validation of the     certificate chain via a malformed SSL/TLS signature for     DSA and ECDSA keys. (CVE-2008-5077)

  - The ASN1_STRING_print_ex function in OpenSSL before     0.9.8k allows remote attackers to cause a denial of     service (invalid memory access and application crash)     via vectors that trigger printing of a (1) BMPString or     (2) UniversalString with an invalid encoded length.
    (CVE-2009-0590)

  - The dtls1_buffer_record function in ssl/d1_pkt.c in     OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote     attackers to cause a denial of service (memory     consumption) via a large series of future epoch DTLS     records that are buffered in a queue, aka DTLS record     buffer limitation bug. (CVE-2009-1377)

  - Multiple memory leaks in the     dtls1_process_out_of_seq_message function in     ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8     versions allow remote attackers to cause a denial of     service (memory consumption) via DTLS records that (1)     are duplicates or (2) have sequence numbers much greater     than current sequence numbers, aka DTLS fragment     handling memory leak. (CVE-2009-1378)

  - Use-after-free vulnerability in the     dtls1_retrieve_buffered_fragment function in     ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote     attackers to cause a denial of service (openssl s_client     crash) and possibly have unspecified other impact via a     DTLS packet, as demonstrated by a packet from a server     that uses a crafted server certificate. (CVE-2009-1379)

  - ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote     attackers to cause a denial of service (NULL pointer     dereference and daemon crash) via a DTLS     ChangeCipherSpec packet that occurs before ClientHello.
    (CVE-2009-1386)

  - The dtls1_retrieve_buffered_fragment function in     ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows     remote attackers to cause a denial of service (NULL     pointer dereference and daemon crash) via an out-of-     sequence DTLS handshake message, related to a fragment     bug. (CVE-2009-1387)

  - The Network Security Services (NSS) library before     3.12.3, as used in Firefox; GnuTLS before 2.6.4 and     2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products     support MD2 with X.509 certificates, which might allow     remote attackers to spoof certificates by using MD2     design flaws to generate a hash collision in less than     brute-force time. NOTE: the scope of this issue is     currently limited because the amount of computation     required is still large. (CVE-2009-2409)

  - OpenSSL before 0.9.8m does not check for a NULL return     value from bn_wexpand function calls in (1)     crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3)     crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which     has unspecified impact and context-dependent attack     vectors. (CVE-2009-3245)

  - The TLS protocol, and the SSL protocol 3.0 and possibly     earlier, as used in Microsoft Internet Information     Services (IIS) 7.0, mod_ssl in the Apache HTTP Server     2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5     and earlier, Mozilla Network Security Services (NSS)     3.12.4 and earlier, multiple Cisco products, and other     products, does not properly associate renegotiation     handshakes with an existing connection, which allows     man-in-the-middle attackers to insert data into HTTPS     sessions, and possibly other types of sessions protected     by TLS or SSL, by sending an unauthenticated request     that is processed retroactively by a server in a post-     renegotiation context, related to a plaintext     injection attack, aka the Project Mogul issue.
    (CVE-2009-3555)

  - Memory leak in the zlib_stateful_finish function in     crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and     1.0.0 Beta through Beta 4 allows remote attackers to     cause a denial of service (memory consumption) via     vectors that trigger incorrect calls to the     CRYPTO_cleanup_all_ex_data function, as demonstrated by     use of SSLv3 and PHP with the Apache HTTP Server, a     related issue to CVE-2008-1678. (CVE-2009-4355)

  - The kssl_keytab_is_available function in ssl/kssl.c in     OpenSSL before 0.9.8n, when Kerberos is enabled but     Kerberos configuration files cannot be opened, does not     check a certain return value, which allows remote     attackers to cause a denial of service (NULL pointer     dereference and daemon crash) via SSL cipher     negotiation, as demonstrated by a chroot installation of     Dovecot or stunnel without Kerberos configuration files     inside the chroot. (CVE-2010-0433)

  - The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c     in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1     before 1.0.1a does not properly interpret integer data,     which allows remote attackers to conduct buffer overflow     attacks, and cause a denial of service (memory     corruption) or possibly have unspecified other impact,     via crafted DER data, as demonstrated by an X.509     certificate or an RSA public key. (CVE-2012-2110)

  - The TLS protocol 1.2 and earlier, as used in Mozilla     Firefox, Google Chrome, Qt, and other products, can     encrypt compressed data without properly obfuscating the     length of the unencrypted data, which allows man-in-the-     middle attackers to obtain plaintext HTTP headers by     observing length differences during a series of guesses     in which a string in an HTTP request potentially matches     an unknown string in an HTTP header, aka a CRIME     attack. (CVE-2012-4929)

  - OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1     before 1.0.1d does not properly perform signature     verification for OCSP responses, which allows remote     OCSP servers to cause a denial of service (NULL pointer     dereference and application crash) via an invalid key.
    (CVE-2013-0166)

  - The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0     and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and     other products, do not properly consider timing side-     channel attacks on a MAC check requirement during the     processing of malformed CBC padding, which allows remote     attackers to conduct distinguishing attacks and     plaintext-recovery attacks via statistical analysis of     timing data for crafted packets, aka the Lucky     Thirteen issue. (CVE-2013-0169)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
41424	SuSE 11 Security Update : OpenSSL (SAT Patch Number 909)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	medium
44993	VMSA-2010-0004 : ESX Service Console and vMA third-party updates	Nessus	VMware ESX Local Security Checks	2010/3/5	2021/1/6	high
89737	VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2010-0004) (remote check)	Nessus	VMware ESX Local Security Checks	2016/3/8	2021/1/6	high
46015	HP System Management Homepage < 6.0.0.96 / 6.0.0-95 多個弱點	Nessus	Web Servers	2010/4/27	2022/4/11	critical
127201	NewStart CGSL CORE 5.04 / MAIN 5.04：openssl 多個弱點 (NS-SA-2019-0033)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2023/4/25	high
45039	OpenSSL < 0.9.8m 多個弱點	Nessus	Web Servers	2010/3/11	2024/10/23	critical
46765	VMSA-2010-0009 : ESXi ntp 和 ESX 服務主控台第三方更新	Nessus	VMware ESX Local Security Checks	2010/6/1	2021/1/6	high
17768	OpenSSL 1.0.0 < 1.0.0-beta2 DoS	Nessus	Web Servers	2012/1/4	2024/10/23	medium
63892	RHEL 5 : openssl (RHSA-2009:1335)	Nessus	Red Hat Local Security Checks	2013/1/24	2024/4/21	high
38923	openSUSE 10 Security Update : libopenssl-devel (libopenssl-devel-6268)	Nessus	SuSE Local Security Checks	2009/5/27	2021/1/14	medium
39474	Fedora 10 : openssl-0.9.8g-14.fc10 (2009-5412)	Nessus	Fedora Local Security Checks	2009/6/21	2021/1/11	medium
42968	GLSA-200912-01 : OpenSSL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2009/12/2	2021/1/6	medium
44946	Slackware 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / current : openssl (SSA:2010-060-02)	Nessus	Slackware Local Security Checks	2010/3/2	2021/1/14	critical
127177	NewStart CGSL CORE 5.04 / MAIN 5.04 : openssl098e Multiple Vulnerabilities (NS-SA-2019-0020)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2022/12/6	critical

偵測

搜尋 Plugin

medium

high

high

critical

high

critical

high

medium

high

medium

medium

medium

critical

critical