根據其自我報告的版本號碼，遠端 Junos Space 版本為 17.2R1 以前的版本。因此，會受到多個弱點影響。

The remote NewStart CGSL host, running version MAIN 5.04, has postgresql packages installed that are affected by multiple vulnerabilities:

  - Privilege escalation flaws were found in the Red Hat     initialization scripts of PostgreSQL. An attacker with     access to the postgres user account could use these     flaws to obtain root access on the server machine.
    (CVE-2017-15097)

  - Privilege escalation flaws were found in the     initialization scripts of PostgreSQL. An attacker with     access to the postgres user account could use these     flaws to obtain root access on the server machine.
    (CVE-2017-12172)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3402 advisory.

    [9.2.23-3]
    - setup: keep PGSETUP_* variables after switching to not-privileged user

    [9.2.23-2]
    - fix CVE-2017-12172

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for postgresql94 fixes the following issues: Security issues fixed :

  - CVE-2017-15098: Fix crash due to rowtype mismatch in     json{b}_populate_recordset() (bsc#1067844).

  - CVE-2017-12172: Start scripts permit database     administrator to modify root-owned files. This issue did     not affect SUSE (bsc#1062538). Bug fixes :

  - Update to version 9.4.15

  - https://www.postgresql.org/docs/9.4/static/release-9-4-15.html

  - https://www.postgresql.org/docs/9.4/static/release-9-4-14.html

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - Privilege escalation flaws were found in the     initialization scripts of PostgreSQL. An attacker with     access to the postgres user account could use these     flaws to obtain root access on the server machine.
    (CVE-2017-12172, CVE-2017-15097)

Note: This patch drops the script privileges from root to the postgres user. Therefore, this update works properly only if the postgres user has write access to the postgres' home directory, such as the one in the default configuration (/var/lib/pgsql).

According to its self-reported version number, the remote Junos Space version is prior to 17.2R1. It is, therefore, affected by multiple vulnerabilities.

运行版本 MAIN 5.04 的远程 NewStart CGSL 主机安装有受多个漏洞影响的 postgresql 程序包：- PostgreSQL 的 Red Hat 初始化脚本中发现权限提升缺陷。可访问 postgres 用户帐户的攻击者，可利用这些缺陷获得服务器计算机上的根访问。(CVE-2017-15097) - PostgreSQL 初始化脚本中发现权限提升缺陷。可访问 postgres 用户帐户的攻击者，可利用这些缺陷获得服务器计算机上的根访问。(CVE-2017-12172) 请注意，Nessus 并未针对此问题进行测试，而仅依赖应用程序自我报告的版本号。

来自 Red Hat 安全公告 2017:3402： postgresql 的更新现在可用于 Red Hat Enterprise Linux 7。 Red Hat 产品安全团队将此更新评级为具有中等安全影响。可从“参考”部分中的 CVE 链接获取通用漏洞评分系统 (CVSS) 基本分数，其针对每个漏洞给出了详细的严重性等级。 PostgreSQL 是高级对象关系数据库管理系统 (DBMS)。 安全补丁： * PostgreSQL 初始化脚本中发现权限提升缺陷。可访问 postgres 用户帐户的攻击者，可利用这些缺陷获得服务器计算机上的根访问。 (CVE-2017-12172, CVE-2017-15097) 注意：此修补程序将脚本特权从根降至 postgres 用户。因此，只有当 postgres 用户能对 postgres 主目录（例如默认配置中的目录 /var/lib/pgsql）进行写入访问时，此更新才能正常工作。 Red Hat 在此感谢 PostgreSQL 项目报告 CVE-2017-12172。CVE-2017-15097 问题由 Pedro Barbosa (Red Hat) 和 PostgreSQL 项目发现。上游感谢这些问题的原始报告者 Antoine Scemama (Brainloop)。

安全修复：- PostgreSQL 初始化脚本中发现权限提升缺陷。可访问 postgres 用户帐户的攻击者，可利用这些缺陷获得服务器计算机上的根访问。(CVE-2017-12172, CVE-2017-15097) 注意：此补丁将脚本特权从根降至 postgres 用户。因此，只有当 postgres 用户能对 postgres 主目录（例如默认配置中的目录 /var/lib/pgsql）进行写入访问时，此更新才能正常工作。

根据其自我报告的版本号，远程 Junos Space 版本低于 17.2R1。因而会受到多个漏洞的影响。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
108520	Juniper Junos Space < 17.2R1 多個弱點 (JSA10838)	Nessus	Junos Local Security Checks	2018/3/21	2024/12/19	critical
127150	NewStart CGSL MAIN 5.04 : postgresql Multiple Vulnerabilities (NS-SA-2019-0006)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	medium
105142	Oracle Linux 7 : postgresql (ELSA-2017-3402)	Nessus	Oracle Linux Local Security Checks	2017/12/11	2024/11/1	medium
106049	SUSE SLED12 / SLES12 Security Update : postgresql94 (SUSE-SU-2018:0081-1)	Nessus	SuSE Local Security Checks	2018/1/15	2019/9/10	high
105387	Scientific Linux Security Update : postgresql on SL7.x x86_64 (20171219)	Nessus	Scientific Linux Local Security Checks	2017/12/20	2021/1/14	medium
108520	Juniper Junos Space < 17.2R1 Multiple Vulnerabilities (JSA10838)	Nessus	Junos Local Security Checks	2018/3/21	2024/12/19	critical
127150	NewStart CGSL MAIN 5.04：postgresql 多个漏洞 (NS-SA-2019-0006)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	medium
105142	Oracle Linux 7 : postgresql (ELSA-2017-3402)	Nessus	Oracle Linux Local Security Checks	2017/12/11	2024/11/1	medium
105387	Scientific Linux 安全更新：SL7.x x86_64 上的 postgresql	Nessus	Scientific Linux Local Security Checks	2017/12/20	2021/1/14	medium
108520	Juniper Junos Space < 17.2R1 多种漏洞 (JSA10838)	Nessus	Junos Local Security Checks	2018/3/21	2024/12/19	critical

检测

插件搜索

critical

medium

medium

high

medium

critical

medium

medium

medium

critical