The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0858 advisory.

  - bzip2: integer overflow flaw in BZ2_decompress (CVE-2010-0405)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201110-20 (Clam AntiVirus: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Clam AntiVirus. Please       review the CVE identifiers referenced below for details.
  Impact :

    An unauthenticated remote attacker may execute arbitrary code with the       privileges of the Clam AntiVirus process or cause a Denial of Service by       causing an affected user or system to scan a crafted file.
  Workaround :

    There is no known workaround at this time.

The remote VMware ESXi 5.0 host is affected by multiple vulnerabilities :

  - A denial of service vulnerability exists in the     big2_toUtf8() function in file lib/xmltok.c in the     libexpat library. A remote attacker can exploit this,     via an XML document having malformed UTF-8 sequences, to     cause a buffer over-read, thus crashing the application.
    (CVE-2009-3560)

  - A denial of service vulnerability exists in the     updatePosition() function in file lib/xmltok.c in the     libexpat library. A remote attacker can exploit this,     via an XML document having malformed UTF-8 sequences, to     cause a buffer over-read, thus crashing the application.
    (CVE-2009-3720)

  - An integer overflow condition exists in the     BZ2_decompress() function in file decompress.c in the     bzip2 and libbzip2 library. A remote attacker can     exploit this, via a crafted compressed file, to cause     a denial of service or the execution of arbitrary code.
    (CVE-2010-0405)

  - A denial of service vulnerability exists in the audioop     module due to multiple integer overflows conditions in     file audioop.c. A remote attacker can exploit this, via     a large fragment or argument, to cause a buffer     overflow, resulting in an application crash.
    (CVE-2010-1634)

  - A denial of service vulnerability exists in the audioop     module due to a failure to verify the relationships     between size arguments and byte string length. A remote     attacker can exploit this, via crafted arguments, to     cause memory corruption, resulting in an application     crash. (CVE-2010-2089)

  - A flaw exists in the urllib and urllib2 modules due to     processing Location headers that specify redirection to     a file. A remote attacker can exploit this, via a     crafted URL, to gain sensitive information or cause a     denial of service. (CVE-2011-1521)

  - A privilege escalation vulnerability exists due to an     incorrect ACL being used for the VMware Tools folder. An     attacker on an adjacent network with access to a guest     operating system can exploit this to gain elevated     privileges on the guest operating system.
    (CVE-2012-1518)

SunOS 5.10_x86: SunFreeware bzip2 patch.
Date this patch was last updated by Sun : Nov/15/10

This update fixes an integer overflow in the BZ2_decompress function of bzip2/libbz2. This can be exploited via a crafted archive to cause a denial of service or even execute arbitrary code. (CVE-2010-0405)

This update fixes an integer overflow in the BZ2_decompress function of bzip2/libbz2. This could have been exploited via a crafted archive to cause a denial of service or even execute arbitrary code.
(CVE-2010-0405)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2011-001 applied. 

This security update contains fixes for the following products :

  - Apache
  - bzip2
  - ClamAV
  - ImageIO
  - Kerberos
  - Libinfo
  - libxml
  - Mailman
  - PHP
  - QuickLook
  - Ruby
  - X11

Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.

Mikolaj Izdebski has discovered an integer overflow flaw in the BZ2_decompress function in bzip2/libbz2. An attacker could use a crafted bz2 file to cause a denial of service (application crash) or potentially to execute arbitrary code. (CVE-2010-0405 )

- Bug #627882 - CVE-2010-0405 bzip2: integer overflow flaw     in BZ2_decompress

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Wed Sep 22 2010 Ivana Hutarova Varekova <varekova at     redhat.com> - 1.0.6-1

    - update to 1.0.6

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.7.

Mac OS X 10.6.7 contains security fixes for the following products :

  - AirPort
  - Apache
  - AppleScript
  - ATS
  - bzip2
  - CarbonCore
  - ClamAV
  - CoreText
  - File Quarantine
  - HFS
  - ImageIO
  - Image RAW
  - Installer
  - Kerberos
  - Kernel
  - Libinfo
  - libxml
  - Mailman
  - PHP
  - QuickLook
  - QuickTime
  - Ruby
  - Samba
  - Subversion
  - Terminal
  - X11

a. VMware Tools Display Driver Privilege Escalation

 The VMware XPDM and WDDM display drivers contain buffer overflow  vulnerabilities and the XPDM display driver does not properly  check for NULL pointers. Exploitation of these issues may lead  to local privilege escalation on Windows-based Guest Operating  Systems.

 VMware would like to thank Tarjei Mandt for reporting theses  issues to us.

 The Common Vulnerabilities and Exposures project (cve.mitre.org)  has assigned the names CVE-2012-1509 (XPDM buffer overrun),  CVE-2012-1510 (WDDM buffer overrun) and CVE-2012-1508 (XPDM null  pointer dereference) to these issues.

 Note: CVE-2012-1509 doesn't affect ESXi and ESX.

b. vSphere Client internal browser input validation vulnerability

 The vSphere Client has an internal browser that renders html  pages from log file entries. This browser doesn't properly  sanitize input and may run script that is introduced into the  log files. In order for the script to run, the user would need  to open an individual, malicious log file entry. The script  would run with the permissions of the user that runs the vSphere  Client.

 VMware would like to thank Edward Torkington for reporting this  issue to us.

 The Common Vulnerabilities and Exposures project (cve.mitre.org)  has assigned the name CVE-2012-1512 to this issue.

 In order to remediate the issue, the vSphere Client of the  vSphere 5.0 Update 1 release or the vSphere 4.1 Update 2 release  needs to be installed. The vSphere Clients that come with  vSphere 4.0 and vCenter Server 2.5 are not affected.

c. vCenter Orchestrator Password Disclosure

 The vCenter Orchestrator (vCO) Web Configuration tool reflects  back the vCenter Server password as part of the webpage. This  might allow the logged-in vCO administrator to retrieve the  vCenter Server password.

 VMware would like to thank Alexey Sintsov from Digital Security  Research Group for reporting this issue to us.

 The Common Vulnerabilities and Exposures project (cve.mitre.org)  has assigned the name CVE-2012-1513 to this issue.

d. vShield Manager Cross-Site Request Forgery vulnerability

 The vShield Manager (vSM) interface has a Cross-Site Request  Forgery vulnerability. If an attacker can convince an  authenticated user to visit a malicious link, the attacker may  force the victim to forward an authenticated request to the  server.

 VMware would like to thank Frans Pehrson of Xxor AB  (www.xxor.se<http://www.xxor.se>) and Claudio Criscione for independently reporting  this issue to us

 The Common Vulnerabilities and Exposures project (cve.mitre.org)  has assigned the name CVE-2012-1514 to this issue.

e. vCenter Update Manager, Oracle (Sun) JRE update 1.6.0_30

 Oracle (Sun) JRE is updated to version 1.6.0_30, which addresses  multiple security issues that existed in earlier releases of  Oracle (Sun) JRE.

 Oracle has documented the CVE identifiers that are addressed in  JRE 1.6.0_29 and JRE 1.6.0_30 in the Oracle Java SE Critical  Patch Update Advisory of October 2011. The References section  provides a link to this advisory.

f. vCenter Server Apache Tomcat update 6.0.35

 Apache Tomcat has been updated to version 6.0.35 to address  multiple security issues.

 The Common Vulnerabilities and Exposures project (cve.mitre.org)  has assigned the names CVE-2011-3190, CVE-2011-3375,  CVE-2011-4858, and CVE-2012-0022 to these issues.


g. ESXi update to third-party component bzip2

 The bzip2 library is updated to version 1.0.6, which resolves a  security issue.

 The Common Vulnerabilities and Exposures project (cve.mitre.org)  has assigned the name CVE-2010-0405 to this issue.

An integer overflow flaw was discovered in the bzip2 decompression routine. This issue could, when decompressing malformed archives, cause bzip2, or an application linked against the libbz2 library, to crash or, potentially, execute arbitrary code. (CVE-2010-0405)

All running applications using the libbz2 library must be restarted for the update to take effect.

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries :

  - bzip2
  - Network Security Services (NSS) Library
  - OpenSSL
  - Samba

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
50630	RHEL 6 : bzip2 (RHSA-2010:0858)	Nessus	Red Hat Local Security Checks	2010/11/18	2024/4/21	medium
56595	GLSA-201110-20 : Clam AntiVirus: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2011/10/24	2021/1/6	high
70881	ESXi 5.0 < Build 608089 Multiple Vulnerabilities (remote check)	Nessus	Misc.	2013/11/13	2018/11/15	high
107958	Solaris 10 (x86) : 126869-05	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/23	medium
49755	openSUSE Security Update : bzip2 (openSUSE-SU-2010:0684-1)	Nessus	SuSE Local Security Checks	2010/10/6	2021/1/14	medium
49760	SuSE9 Security Update : bzip2 (YOU Patch Number 12645)	Nessus	SuSE Local Security Checks	2010/10/6	2021/1/14	medium
52753	Mac OS X Multiple Vulnerabilities (Security Update 2011-001)	Nessus	MacOS X Local Security Checks	2011/3/22	2024/5/28	high
79587	F5 Networks BIG-IP : bzip2 vulnerability (SOL15878)	Nessus	F5 Networks Local Security Checks	2014/11/27	2021/3/10	medium
49291	Debian DSA-2112-1 : bzip2 - integer overflow	Nessus	Debian Local Security Checks	2010/9/21	2021/1/4	medium
49684	Fedora 14 : bzip2-1.0.6-1.fc14 (2010-15106)	Nessus	Fedora Local Security Checks	2010/9/27	2021/1/11	medium
50697	Fedora 12 : bzip2-1.0.6-1.fc12 (2010-15125)	Nessus	Fedora Local Security Checks	2010/11/24	2021/1/11	medium
52754	Mac OS X 10.6.x < 10.6.7 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2011/3/22	2024/5/28	high
58362	VMSA-2012-0005 : VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, Workstation, Player, ESXi, and ESX address several security issues	Nessus	VMware ESX Local Security Checks	2012/3/16	2022/12/5	critical
60858	Scientific Linux Security Update : bzip2 on SL3.x, SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
89745	VMware ESX Multiple Vulnerabilities (VMSA-2010-0019) (remote check)	Nessus	VMware ESX Local Security Checks	2016/3/8	2021/1/6	high

检测

插件搜索

medium

high

high

medium

medium

medium

high

medium

medium

medium

medium

high

critical

medium

high