The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-650:01 advisory.

    Python is an interpreted, interactive, object-oriented programming     language often compared to Tcl, Perl, Scheme or Java. Python includes     modules, classes, exceptions, very high level dynamic data types and     dynamic typing. Python supports interfaces to many system calls and     libraries, as well as to various windowing systems (X11, Motif, Tk,     Mac and MFC).
    Programmers can write new built-in modules for Python in C or C  .
    Python can be used as an extension language for applications that need     a programmable interface.
    Note that documentation for Python is provided in the python-docs     package.
    This package provides the python executable; most of the actual     implementation is within the python-libs package.
    Security issues fixed with this release:
    CVE-2016-1000110
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2016:0438 advisory.

    The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash     Player web browser plug-in.

    This update fixes multiple vulnerabilities in Adobe Flash Player. These     vulnerabilities, detailed in the Adobe Security Bulletin APSB16-08 listed     in the References section, could allow an attacker to create a specially     crafted SWF file that would cause flash-plugin to crash, execute arbitrary     code, or disclose sensitive information when the victim loaded a page     containing the malicious SWF content. (CVE-2016-0960, CVE-2016-0961,     CVE-2016-0962, CVE-2016-0963, CVE-2016-0986, CVE-2016-0987, CVE-2016-0988,     CVE-2016-0989, CVE-2016-0990, CVE-2016-0991, CVE-2016-0992, CVE-2016-0993,     CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998,     CVE-2016-0999, CVE-2016-1000, CVE-2016-1001, CVE-2016-1002, CVE-2016-1005,     CVE-2016-1010)

    All users of Adobe Flash Player should install this updated package, which     upgrades Flash Player to version 11.2.202.577.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe AIR installed on the remote Mac OS X host is prior or equal to version 20.0.0.260. It is, therefore, affected by multiple vulnerabilities :

  - Multiple integer overflow conditions exist that allow an     attacker to execute arbitrary code. (CVE-2016-0963,     CVE-2016-0993, CVE-2016-1010)

  - Multiple use-after-free errors exist that allow an     attacker to execute arbitrary code. (CVE-2016-0987,     CVE-2016-0988, CVE-2016-0990, CVE-2016-0991,     CVE-2016-0994, CVE-2016-0995, CVE-2016-0996,     CVE-2016-0997, CVE-2016-0998, CVE-2016-0999,     CVE-2016-1000)

  - A heap overflow condition exists that allows an attacker     to execute arbitrary code. (CVE-2016-1001)

  - Multiple memory corruption issues exist that allow an     attacker to execute arbitrary code. (CVE-2016-0960,     CVE-2016-0961, CVE-2016-0962, CVE-2016-0986,     CVE-2016-0989, CVE-2016-0992, CVE-2016-1002,     CVE-2016-1005)

The remote host is affected by the vulnerability described in GLSA-201603-07 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, cause a Denial of Service condition, obtain       sensitive information, or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
289177	MiracleLinux 7 : python-2.7.5-38.0.1.el7.AXS7 (AXSA:2016-650:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
89917	RHEL 5 / 6 : flash-plugin (RHSA-2016:0438)	Nessus	Red Hat Local Security Checks	2016/3/14	2024/11/4	high
89869	Adobe AIR for Mac <= 20.0.0.260 Multiple Vulnerabilities (APSB16-08)	Nessus	MacOS X Local Security Checks	2016/3/11	2023/4/25	high
89900	GLSA-201603-07 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2016/3/14	2022/5/25	critical

检测

插件搜索

high

high

high

critical