- fix bnc#793394 - bypass of security constraints     (CVE-2012-3546)

  - tomcat-CVE-2012-3546.patch     http://svn.apache.org/viewvc?view=revision&revision=1377     892

  - fix bnc#793391 - bypass of CSRF prevention filter     (CVE-2012-4431)

  - tomcat-CVE-2012-4431.patch     http://svn.apache.org/viewvc?view=revision&revision=1393     088

  - document how to protect against slowloris DoS     (CVE-2012-5568/bnc#791679) in README.SUSE

  - fixes bnc#791423 - cnonce tracking weakness     (CVE-2012-5885) bnc#791424 - authentication caching     weakness (CVE-2012-5886) bnc#791426 - stale nonce     weakness (CVE-2012-5887)

  - tomcat-dont-parse-user-name-twice.patch     http://svn.apache.org/viewvc?view=revision&revision=1366     723

  - tomcat-CVE-2009-2693-CVE-2009-2901-CVE-2009-2902.patch     http://svn.apache.org/viewvc?view=revision&revision=1377     807

  - fix bnc#789406: HTTP NIO connector OOM DoS via a request     with large headers (CVE-2012-2733)

  - http://svn.apache.org/viewvc?view=revision&revision=1350301

  - fix bnc#779538 - Tomcat7 default current workdir isn't     /usr/share/tomcat

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries :

  - Apache Tomcat 
  - Apache Tomcat Manager
  - cURL 
  - Java Runtime Environment (JRE)
  - Kernel 
  - Microsoft SQL Express
  - OpenSSL
  - pam_krb5

ID	名稱	產品	系列	已發布	已更新	嚴重性
74853	openSUSE Security Update : tomcat (openSUSE-SU-2012:1701-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
89674	VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0003) (remote check)	Nessus	Misc.	2016/3/4	2022/5/25	high

偵測

搜尋 Plugin

medium

high