The remote host is running an unpatched version of Oracle Traffic Director that is affected by the following vulnerabilities :

  - The implementation of Network Security Services (NSS)     does not ensure that data structures are initialized,     which could result in a denial of service or disclosure     of sensitive information. (CVE-2013-1739)

  - The implementation of Network Security Services (NSS)     does not properly handle the TLS False Start feature     and could allow man-in-the-middle attacks.
    (CVE-2013-1740)

  - NSS contains an integer overflow flaw that allows     remote attackers to cause a denial of service.
    (CVE-2013-1741)

  - An error exists in the 'Null_Cipher' function in the     file 'ssl/ssl3con.c' related to handling invalid     handshake packets that could allow arbitrary code     execution. (CVE-2013-5605)

  - An error exists in the 'CERT_VerifyCert' function in     the file 'lib/certhigh/certvfy.c' that could allow     invalid certificates to be treated as valid.
    (CVE-2013-5606)

  - Network Security Services (NSS) contains a race     condition in libssl that occurs during session ticket     processing. A remote attacker can exploit this flaw     to cause a denial of service. (CVE-2014-1490)

  - Network Security Services (NSS) does not properly     restrict public values in Diffie-Hellman key exchanges,     allowing a remote attacker to bypass cryptographic     protection mechanisms. (CVE-2014-1491)

  - An issue exists in the Network Security (NSS) library     due to improper handling of IDNA domain prefixes for     wildcard certificates. This issue could allow man-in-     the-middle attacks. (CVE-2014-1492)

The Oracle OpenSSO agent installed on the remote host is missing a vendor-supplied update. It is, therefore, affected by multiple vulnerabilities in the bundled Mozilla Network Security Services, the most serious of which can allow remote code execution.

The remote host is affected by the vulnerability described in GLSA-201406-19 (Mozilla Network Security Service: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the Mozilla Network       Security Service. Please review the CVE identifiers referenced below for       more details about the vulnerabilities.
  Impact :

    A remote attacker can cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-054:01 advisory.

    nss: Network Security Services (NSS) is a set of libraries designed to support cross-platform development     of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3,     TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.
     nss-util: Utilities for Network Security Services and the Softoken module      nspr: NSPR provides platform independence for non-GUI operating system facilities. These facilities     include threads, thread synchronization, normal file and network I/O, interval timing and calendar time,     basic memory management (malloc and free) and shared library linking.
    Security issues fixed with this release:
     a subordinate Certificate Authority (CA) mis-issued an intermediate certificate, which could be used to     conduct man-in-the-middle attacks. This update renders that particular intermediate certificate as     untrusted.
    Note: This fix only applies to applications using the NSS Builtin Object Token. It does not render the     certificates untrusted for applications that use the NSS library, but do not use the NSS Builtin Object     Token.
     CVE-2013-1739     Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized     before read operations, which allows remote attackers to cause a denial of service or possibly have     unspecified other impact via vectors that trigger a decryption failure.
     CVE-2013-1741     Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to     cause a denial of service or possibly have unspecified other impact via a large size value.
     CVE-2013-5605     Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers     to cause a denial of service or possibly have unspecified other impact via invalid handshake packets.
     CVE-2013-5606     The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15     before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the     CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access restrictions     via a crafted certificate.
     CVE-2013-5607     Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before     4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and     SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or     possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.
    Fixed bugs:
     Previously, loading a single key multiple times caused an SSL connection to fail. This was because of the     NSS PEM module that pretended token removal whenever a key from file was being loaded. This has been     fixed.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The installed version of Firefox ESR is a version prior to 17.0.11 and is, therefore, potentially affected by a code execution vulnerability related to the function 'Null_Cipher' in the file 'ssl/ssl3con.c' and handling handshake packets.

A flaw was found in the way NSS handled invalid handshake packets. A remote attacker could use this flaw to cause a TLS/SSL client using NSS to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2013-5605)

It was found that the fix for CVE-2013-1620 released via SLSA-2013:1135 introduced a regression causing NSS to read uninitialized data when a decryption failure occurred. A remote attacker could use this flaw to cause a TLS/SSL server using NSS to crash. (CVE-2013-1739)

An integer overflow flaw was discovered in both NSS and NSPR's implementation of certification parsing on 64-bit systems. A remote attacker could use these flaws to cause an application using NSS or NSPR to crash. (CVE-2013-1741, CVE-2013-5607)

It was discovered that NSS did not reject certificates with incompatible key usage constraints when validating them while the verifyLog feature was enabled. An application using the NSS certificate validation API could accept an invalid certificate.
(CVE-2013-5606)

In addition, the nss package has been upgraded to upstream version 3.15.3, and the nspr package has been upgraded to upstream version 4.10.2. These updates provide a number of bug fixes and enhancements over the previous versions.

This update also fixes the following bug :

  - The SLBA-2013:1318 update introduced a regression that     prevented the use of certificates that have an MD5     signature. This update fixes this regression and     certificates that have an MD5 signature are once again     supported. To prevent the use of certificates that have     an MD5 signature, set the 'NSS_HASH_ALG_SUPPORT'     environment variable to '-MD5'.

After installing this update, applications using NSS or NSPR must be restarted for this update to take effect.

Updated nss packages that fix one security issue are now available for Red Hat Enterprise Linux 5.3 Long Life, and Red Hat Enterprise Linux 5.6 and 5.9 Extended Update Support.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

A flaw was found in the way NSS handled invalid handshake packets. A remote attacker could use this flaw to cause a TLS/SSL client using NSS to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2013-5605)

All NSS users should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, applications using NSS must be restarted for the changes to take effect.

ID	名稱	產品	系列	已發布	已更新	嚴重性
76938	Oracle Traffic Director Multiple Vulnerabilities (July 2014 CPU)	Nessus	Misc.	2014/7/31	2018/11/15	high
78774	Oracle OpenSSO Agent Multiple Vulnerabilities (October 2014 CPU)	Nessus	CGI abuses	2014/10/31	2022/4/11	high
76178	GLSA-201406-19 : Mozilla Network Security Service: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2014/6/23	2021/1/6	medium
291470	MiracleLinux 4 : nspr-4.10.2-1.AXS4, nss-3.15.3-6.0.1.AXS4, nss-util-3.15.3-1.AXS4 (AXSA:2014-054:01)	Nessus	Miracle Linux Local Security Checks	2026/1/19	2026/1/19	critical
70944	Firefox ESR < 17.0.11 Null_Cipher Code Execution (Mac OS X)	Nessus	MacOS X Local Security Checks	2013/11/18	2026/3/3	high
71306	Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20131205)	Nessus	Scientific Linux Local Security Checks	2013/12/10	2021/1/14	high
78989	RHEL 5 : nss (RHSA-2013:1841)	Nessus	Red Hat Local Security Checks	2014/11/8	2021/1/14	high

偵測

搜尋 Plugin

high

high

medium

critical

high

high

high