The remote host is affected by the vulnerability described in GLSA-201206-18 (GnuTLS: Multiple vulnerabilities)

    Multiple vulnerabilities have been found in GnuTLS:
      An error in libgnutls does not properly sanitize '\\0' characters from         certificate fields (CVE-2009-2730).
      An error in the TLS and SSL protocols mistreats renegotiation         handshakes (CVE-2009-3555).
      A boundary error in the 'gnutls_session_get_data()' function in         gnutls_session.c could cause a buffer overflow (CVE-2011-4128).
      An error in the '_gnutls_ciphertext2compressed()' function in         gnutls_cipher.c could cause memory corruption (CVE-2012-1573).
  Impact :

    A remote attacker could perform man-in-the-middle attacks to spoof       arbitrary SSL servers or cause a Denial of Service condition in       applications linked against GnuTLS.
  Workaround :

    There is no known workaround at this time.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party libraries :

  - Apache Struts
  - glibc
  - GnuTLS
  - JRE
  - kernel
  - libxml2
  - OpenSSL
  - Perl
  - popt and rpm

Mu Dynamics, Inc. reports :

The block cipher decryption logic in GnuTLS assumed that a record containing any data which was a multiple of the block size was valid for further decryption processing, leading to a heap corruption vulnerability.

Important security update fixing two security issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

A boundary error was found in the gnutls_session_get_data() function.
A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutls_session_get_data() before checking the real size of the session data provided by the server.
(CVE-2011-4128)

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS). GnuTLS includes libtasn1, a library developed for ASN.1 (Abstract Syntax Notation One) structures management that includes DER (Distinguished Encoding Rules) encoding and decoding.

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

A flaw was found in the way libtasn1 decoded DER data. An attacker could create a carefully-crafted X.509 certificate that, when parsed by an application that uses GnuTLS, could cause the application to crash. (CVE-2012-1569)

A boundary error was found in the gnutls_session_get_data() function.
A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutls_session_get_data() before checking the real size of the session data provided by the server.
(CVE-2011-4128)

Users of GnuTLS are advised to upgrade to these updated packages, which contain backported patches to correct these issues. For the update to take effect, all applications linked to the GnuTLS library must be restarted, or the system rebooted.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0428 advisory.

    - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
    - fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

3 vulnerabilities were discovered for the gnutls packages in openSUSE version 12.1.

ID	名稱	產品	系列	已發布	已更新	嚴重性
59671	GLSA-201206-18 : GnuTLS: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2012/6/25	2021/1/6	high
89038	VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2012-0013) (remote check)	Nessus	Misc.	2016/2/29	2021/1/6	high
58423	FreeBSD : gnutls -- possible overflow/Denial of service vulnerabilities (aecee357-739e-11e1-a883-001cc0a36e12)	Nessus	FreeBSD Local Security Checks	2012/3/22	2021/1/6	medium
58668	Fedora 15 : gnutls-2.10.5-3.fc15 (2012-4569)	Nessus	Fedora Local Security Checks	2012/4/11	2021/1/11	medium
69666	Amazon Linux AMI : gnutls (ALAS-2012-59)	Nessus	Amazon Linux Local Security Checks	2013/9/4	2018/4/18	medium
61290	Scientific Linux Security Update : gnutls on SL5.x i386/x86_64 (20120327)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
68503	Oracle Linux 5 : gnutls (ELSA-2012-0428)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2025/4/29	critical
74627	openSUSE Security Update : gnutls (openSUSE-SU-2012:0620-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	high

偵測

搜尋 Plugin

high

high

medium

medium

medium

medium

critical

high