According to its self-reported version number, the HP System Management Homepage install on the remote host is earlier than 6.2.
Such versions are reportedly affected by the following vulnerabilities :

  - Session renegotiations are not handled properly, which     could be exploited to insert arbitrary plaintext in a     man-in-the-middle attack. (CVE-2009-3555)

  - An attacker may be able to upload files using a POST     request with 'multipart/form-data' content even if the     target script doesn't actually support file uploads per     se. (CVE-2009-4017)

  - PHP's 'proc_open' function can be abused to bypass     'safe_mode_allowed_env_vars' and     'safe_mode_protected_env_vars' directives.
    (CVE-2009-4018)

  - PHP does not properly protect session data as relates     to interrupt corruption of '$_SESSION' and the     'session.save_path' directive. (CVE-2009-4143)

  - The application allows arbitrary URL redirections.
    (CVE-2010-1586 and CVE-2010-3283)

  - An information disclosure vulnerability exists in     Apache's mod_proxy_ajp, mod_reqtimeout, and     mod_proxy_http relating to timeout conditions. Note     that this issue only affects SMH on Windows.
    (CVE-2010-2068)

  - An as-yet unspecified information disclosure     vulnerability may allow an authorized user to gain     access to sensitive information, which in turn could     be leveraged to obtain root access on Linux installs     of SMH. (CVE-2010-3009)

  - There is an as-yet unspecified HTTP response splitting     issue. (CVE-2010-3011)

  - There is an as-yet unspecified cross-site scripting     issue. (CVE-2010-3012)

  - An as-yet unspecified vulnerability could lead to     remote disclosure of sensitive information.
    (CVE-2010-3284)

According to its banner, the version of PHP 5.3 installed on the remote host is older than 5.3.1.  Such versions may be affected by several security issues :

  - Sanity checks are missing in exif processing.

  - It is possible to bypass the 'safe_mode' configuration     setting using 'tempnam()'.

  - It is possible to bypass the 'open_basedir'     configuration setting using 'posix_mkfifo()'.

  - The 'safe_mode_include_dir' configuration setting may     be ignored. (Bug #50063)

  - Calling 'popen()' with an invalid mode can cause a     crash under Windows. (Bug #44683)

  - Provided file uploading is enabled (it is by default),     an attacker can upload files using a POST request with     'multipart/form-data' content even if the target script     doesn't actually support file uploads per se. By     supplying a large number (15,000+) of files, an attacker     could cause the web server to stop responding while it     processes the file list.

  - 'proc_open()' can bypass 'safe_mode_protected_env_vars'.
    (Bug #49026)

  - An unspecified vulnerability affects the LCG entropy.

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0040 advisory.

  - php: exif_read_data crash on corrupted JPEG files (CVE-2009-2687)

  - php: openssl extension: Incorrect verification of SSL certificate with NUL in name (CVE-2009-3291)

  - php: exif extension: Multiple missing sanity checks in EXIF file processing (CVE-2009-3292)

  - gd: insufficient input validation in _gdGetColors() (CVE-2009-3546)

  - PHP: resource exhaustion attack via upload requests with lots of files (CVE-2009-4017)

  - php: htmlspecialchars() insufficient checking of input for multi-byte encodings (CVE-2009-4142)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update of php5 fixes: CVE-2008-5624: CVSS v2 Base Score: 7.5 (HIGH) (AV:N/AC:L/Au:N/C:P/I:P/A:P): Permissions, Privileges, and Access Control (CWE-264) CVE-2008-5625: CVSS v2 Base Score: 7.5 (HIGH) (AV:N/AC:L/Au:N/C:P/I:P/A:P): Permissions, Privileges, and Access Control (CWE-264) CVE-2008-5814: CVSS v2 Base Score: 2.6 (LOW) (AV:N/AC:H/Au:N/C:N/I:P/A:N): Cross-Site Scripting (XSS) (CWE-79) CVE-2009-2626: CVSS v2 Base Score: 6.4 (MEDIUM) (AV:N/AC:L/Au:N/C:P/I:N/A:P): Other (CWE-Other) CVE-2009-2687: CVSS v2 Base Score: 4.3 (MEDIUM) (AV:N/AC:M/Au:N/C:N/I:N/A:P): Input Validation (CWE-20) CVE-2009-3546: CVSS v2 Base Score: 4.4 (moderate) (AV:L/AC:M/Au:N/C:P/I:P/A:P): Other (CWE-Other) CVE-2009-4017: CVSS v2 Base Score: 5.0 (moderate) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Other (CWE-Other) CVE-2009-4142: CVSS v2 Base Score: 4.3 (MEDIUM) (AV:N/AC:M/Au:N/C:N/I:P/A:N): Cross-Site Scripting (XSS) (CWE-79)

This update of PHP5 fixes :

  - CVE-2008-5625: CVSS v2 Base Score: 7.5 (HIGH)     (AV:N/AC:L/Au:N/C:P/I:P/A:P): Permissions, Privileges,     and Access Control (CWE-264) CVE-2008-5814: CVSS v2 Base     Score: 2.6 (LOW) (AV:N/AC:H/Au:N/C:N/I:P/A:N):
    Cross-Site Scripting (XSS) (CWE-79) CVE-2009-2626: CVSS     v2 Base Score: 6.4 (MEDIUM)     (AV:N/AC:L/Au:N/C:P/I:N/A:P): Other (CWE-Other)     CVE-2009-2687: CVSS v2 Base Score: 4.3 (MEDIUM)     (AV:N/AC:M/Au:N/C:N/I:N/A:P): Input Validation (CWE-20)     CVE-2009-3546: CVSS v2 Base Score: 4.4 (moderate)     (AV:L/AC:M/Au:N/C:P/I:P/A:P): Other (CWE-Other)     CVE-2009-4017: CVSS v2 Base Score: 5.0 (moderate)     (AV:N/AC:L/Au:N/C:N/I:N/A:P): Other (CWE-Other)     CVE-2009-4142: CVSS v2 Base Score: 4.3 (MEDIUM)     (AV:N/AC:M/Au:N/C:N/I:P/A:N): Cross-Site Scripting     (XSS). (CWE-79). (CVE-2008-5624: CVSS v2 Base Score: 7.5     (HIGH) (AV:N/AC:L/Au:N/C:P/I:P/A:P): Permissions,     Privileges, and Access Control (CWE-264))

This update of PHP5 fixes :

  - CVE-2008-5624: CVSS v2 Base Score: 7.5 (HIGH)     (AV:N/AC:L/Au:N/C:P/I:P/A:P) : Permissions, Privileges,     and Access Control (CWE-264)

  - CVE-2008-5625: CVSS v2 Base Score: 7.5 (HIGH)     (AV:N/AC:L/Au:N/C:P/I:P/A:P) : Permissions, Privileges,     and Access Control (CWE-264)

  - Cross-Site Scripting (XSS). (CWE-79). (CVE-2008-5814:
    CVSS v2 Base Score: 2.6 (LOW)     (AV:N/AC:H/Au:N/C:N/I:P/A:N))

  - CVE-2009-2626: CVSS v2 Base Score: 6.4 (MEDIUM)     (AV:N/AC:L/Au:N/C:P/I:N/A:P) : Other (CWE-Other)

  - CVE-2009-2687: CVSS v2 Base Score: 4.3 (MEDIUM)     (AV:N/AC:M/Au:N/C:N/I:N/A:P) : Input Validation (CWE-20)

  - CVE-2009-3546: CVSS v2 Base Score: 4.4 (moderate)     (AV:L/AC:M/Au:N/C:P/I:P/A:P) : Other (CWE-Other)

  - CVE-2009-4017: CVSS v2 Base Score: 5.0 (moderate)     (AV:N/AC:L/Au:N/C:N/I:N/A:P) : Other (CWE-Other)

  - Cross-Site Scripting (XSS) (CWE-79). (CVE-2009-4142:
    CVSS v2 Base Score: 4.3 (MEDIUM)     (AV:N/AC:M/Au:N/C:N/I:P/A:N))

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.3.

Mac OS X 10.6.3 contains security fixes for the following products :

  - AFP Server
  - Apache
  - CoreAudio
  - CoreMedia
  - CoreTypes
  - CUPS
  - DesktopServices
  - Disk Images
  - Directory Services
  - Dovecot
  - Event Monitor
  - FreeRADIUS
  - FTP Server
  - iChat Server
  - ImageIO
  - Image RAW
  - Libsystem
  - Mail
  - MySQL
  - OS Services
  - Password Server
  - PHP
  - Podcast Producer
  - Preferences
  - PS Normalizer
  - QuickTime
  - Ruby
  - Server Admin
  - SMB
  - Tomcat
  - Wiki Server
  - X11

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
49272	HP System Management Homepage < 6.2 Multiple Vulnerabilities	Nessus	Web Servers	2010/9/17	2022/4/11	high
42862	PHP 5.3 < 5.3.1 Multiple Vulnerabilities	Nessus	CGI abuses	2009/11/20	2025/5/26	medium
43883	RHEL 4 / 5 : php (RHSA-2010:0040)	Nessus	Red Hat Local Security Checks	2010/1/14	2024/4/21	medium
44678	openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-1993)	Nessus	SuSE Local Security Checks	2010/2/23	2021/1/14	high
49829	SuSE 10 Security Update : PHP5 (ZYPP Patch Number 6847)	Nessus	SuSE Local Security Checks	2010/10/11	2021/1/14	high
44683	openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-1993)	Nessus	SuSE Local Security Checks	2010/2/23	2021/1/14	high
44686	SuSE 11 Security Update : PHP5 (SAT Patch Number 1978)	Nessus	SuSE Local Security Checks	2010/2/23	2021/1/14	high
45372	Mac OS X 10.6.x < 10.6.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2010/3/29	2024/5/28	critical

检测

插件搜索

high

medium

medium

high

high

high

high

critical