此 openssl 更新可修正定時攻擊。此攻擊可在使用 ECDSA 時，隨時取得 TLS 伺服器的私密金鑰。CVE-2011-1945：CVSS v2 基本分數：4.3 (重要) (AV:N/AC:M/Au:N/C:P/I:N/A:N)：密碼編譯問題 (CWE-310)

根據 web 伺服器的標題，遠端主機上承載的 HP System Management Homepage (SMH) 版本比 7.0 舊。因此，據報會受到以下弱點影響：

- 隨附的 libxslt 程式庫中的「generate-id」函式存在一個錯誤，其允許洩漏堆積記憶體位址。(CVE-2011-0195)

- 存在一個不明的輸入驗證錯誤，可允許跨網站要求偽造攻擊。(CVE-2011-3846)

- 存在不明錯誤，可允許攻擊者透過不明向量發動拒絕服務攻擊。
 (CVE-2012-0135、CVE-2012-1993)

- 隨附的 PHP 版本存有多個弱點。(CVE-2010-3436、CVE-2010-4409、CVE-2010-4645、CVE-2011-1148、CVE-2011-1153、CVE-2011-1464、CVE-2011-1467、CVE-2011-1468、CVE-2011-1470、CVE-2011-1471、CVE-2011-1938、CVE-2011-2202、CVE-2011-2483、CVE-2011-3182、CVE-2011-3189、CVE-2011-3267、CVE-2011-3268)

- 隨附的 Apache 版本存有多個弱點。(CVE-2010-1452、CVE-2010-1623、CVE-2010-2068、CVE-2010-2791、CVE-2011-0419、CVE-2011-1928、CVE-2011-3192、CVE-2011-3348、CVE-2011-3368、CVE-2011-3639)

- 數個隨附元件含有 OpenSSL 程式庫，其中存在多個弱點。
 (CVE-2011-0014、CVE-2011-1468、CVE-2011-1945、CVE-2011-3207、CVE-2011-3210)

- 數個隨附元件含有 Curl 程式庫，其中存在多個弱點。
 (CVE-2009-0037、CVE-2010-0734、CVE-2011-2192)

The remote host is running a version of Mac OS X 10.8 that is older than 10.8.4. The newer version contains numerous security-related fixes :

  - A local security-bypass vulnerability exists that affects the Disk Management component. The issue can be exploited by an unauthorized attacker to disable FileVault using the command-line. (CVE-2013-0985)

  - A security-bypass vulnerability in SMB file sharing can occur whereby an authenticated attacker can write files outside the shared directory. (CVE-2013-0990)

  - A remote buffer-overflow vulnerability exists when handling certain PICT images. (CVE-2013-0975)

  - A security-bypass vulnerability exists whereby an attacker with access to a user's session may be able to log into previously accessed sites. An attacker can exploit this issue even if Private Browsing was used. (CVE-2013-0982)

  - A remote-code execution issue affects the text glyphs because of an unbounded stack allocation when handling maliciously crafted URLs. (CVE-2013-0983)

  - A remote-code execution vulnerability exists due to improper handling of text tracks. (CVE-2013-1024)

  - A buffer-overflow vulnerability exists in the Directory Service daemon that can be exploited via a specially crafted network message. (CVE-2013-0984)

ID	名稱	產品	系列	已發布	已更新	嚴重性
75906	openSUSE 安全性更新：libopenssl-devel (openSUSE-SU-2011:0634-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	low
58811	HP System Management Homepage < 7.0 多種弱點	Nessus	Web Servers	2012/4/20	2022/4/11	critical
6857	Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)	Nessus Network Monitor	Web Clients	2013/6/5	2019/3/6	critical
801016	Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)	Log Correlation Engine	Operating System Detection	2013/6/5		high

偵測

搜尋 Plugin

low

critical

critical

high