The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0745 advisory.

    - if hash randomization is enabled, also enable it within pyexpat     Resolves: CVE-2012-0876
    - distutils.commands.register: create ~/.pypirc securely     Resolves: CVE-2011-4944
    - send encoding in SimpleHTTPServer.list_directory to protect IE7 against     potential XSS attacks     Resolves: CVE-2011-4940

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

a. VMware vSphere API denial of service vulnerability

   The VMware vSphere API contains a denial of service    vulnerability.  This issue allows an unauthenticated user to    send a maliciously crafted API request and disable the host    daemon. Exploitation of the issue would prevent management    activities on the host but any virtual machines running on the    host would be unaffected.

   VMware would like to thank Sebastian Tello of Core Security    Technologies for reporting this issue to us.
    The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2012-5703 to this issue.

b. Update to ESX service console bind packages

   The ESX service console bind packages are updated to the    following versions :

       bind-libs-9.3.6-20.P1.el5_8.2        bind-utils-9.3.6-20.P1.el5_8.2

   These updates fix multiple security issues. The Common    Vulnerabilities and Exposures project (cve.mitre.org) has    assigned the names CVE-2012-1033, CVE-2012-1667, and    CVE-2012-3817 to these issues.

c. Update to ESX service console python packages

   The ESX service console Python packages are updated to the    following versions :

       python-2.4.3-46.el5_8.2.x86_64        python-libs-2.4.3-46.el5_8.2.x86_64      These updates fix multiple security issues. The Common    Vulnerabilities and Exposures project (cve.mitre.org) has    assigned the names CVE-2011-4940, CVE-2011-4944, and    CVE-2012-1150 to these issues.

d. Update to ESX service console expat package

   The ESX service console expat package is updated to    expat-1.95.8-11.el5_8.

   This update fixes multiple security issues. The Common    Vulnerabilities and Exposures project (cve.mitre.org) has    assigned the names CVE-2012-0876 and CVE-2012-1148 to these    issues.

e. Update to ESX service console nspr and nss packages

   This patch updates the ESX service console Netscape Portable    Runtime and Network Security Services RPMs to versions    nspr-4.9.1.4.el5_8 and nss-3.13.5.4.9834, respectively, to    resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2012-0441 to this issue. This patch    also resolves a certificate trust issue caused by a fraudulent    DigiNotar root certificate.

This update for python fixes the following issues :

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated python packages fix security vulnerabilities :

A race condition was found in the way the Python distutils module set file permissions during the creation of the .pypirc file. If a local user had access to the home directory of another user who is running distutils, they could use this flaw to gain access to that user's .pypirc file, which can contain usernames and passwords for code repositories (CVE-2011-4944).

Additionally, python has been built against the system expat and ffi libraries, to avoid any future issues with those (mitigates CVE-2012-0876 for expat).

This update for python3 to version 3.6.10 fixes the following issues :

CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).

CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).

CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python3 to version 3.6.10 fixes the following issues :

  - CVE-2017-18207: Fixed a denial of service in     Wave_read._read_fmt_chunk() (bsc#1083507).

  - CVE-2019-16056: Fixed an issue where email parsing could     fail for multiple @ (bsc#1149955).

  - CVE-2019-15903: Fixed a heap-based buffer over-read in     libexpat (bsc#1149429).

This update was imported from the SUSE:SLE-15:Update update project.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-663:02 advisory.

    Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl,     Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and     dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various     windowing systems (X11, Motif, Tk, Mac and MFC).
    Programmers can write new built-in modules for Python in C or C++. Python can be used as an extension     language for applications that need a programmable interface. This package contains most of the standard     Python modules, as well as modules for interfacing to the Tix widget set for Tk and RPM.
    Note that documentation for Python is provided in the python-docs package.
    Security issues fixed with this release:
    CVE-2011-4940     The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x     before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP     header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks against     Internet Explorer 7 via UTF-7 encoding.
    CVE-2011-4944     CVE-2012-0845     CVE-2012-1150     No description available at the time of writing, please use the CVE links below.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-569:02 advisory.

    Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl,     Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and     dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various     windowing systems (X11, Motif, Tk, Mac and MFC).
    Programmers can write new built-in modules for Python in C or C++. Python can be used as an extension     language for applications that need a programmable interface. This package contains most of the standard     Python modules, as well as modules for interfacing to the Tix widget set for Tk and RPM.
    Note that documentation for Python is provided in the python-docs package.
    Security issues fixed with this release:
    CVE-2011-4940     The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x     before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP     header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks against     Internet Explorer 7 via UTF-7 encoding.
    CVE-2011-4944     CVE-2012-1150     No description available at the time of writing, please use the CVE links below.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Python is an interpreted, interactive, object-oriented programming language.

A denial of service flaw was found in the implementation of associative arrays (dictionaries) in Python. An attacker able to supply a large number of inputs to a Python application (such as HTTP POST request parameters sent to a web application) that are used as keys when inserting data into an array could trigger multiple hash function collisions, making array operations take an excessive amount of CPU time. To mitigate this issue, randomization has been added to the hash function to reduce the chance of an attacker successfully causing intentional collisions. (CVE-2012-1150)

Note: The hash randomization is not enabled by default as it may break applications that incorrectly depend on dictionary ordering. To enable the protection, the new 'PYTHONHASHSEED' environment variable or the Python interpreter's '-R' command line option can be used. Refer to the python(1) manual page for details.

The previous expat erratum must be installed with this update, which adds hash randomization to the Expat library used by the Python pyexpat module.

A flaw was found in the way the Python SimpleHTTPServer module generated directory listings. An attacker able to upload a file with a specially crafted name to a server could possibly perform a cross-site scripting (XSS) attack against victims visiting a listing page generated by SimpleHTTPServer, for a directory containing the crafted file (if the victims were using certain web browsers). (CVE-2011-4940)

A race condition was found in the way the Python distutils module set file permissions during the creation of the .pypirc file. If a local user had access to the home directory of another user who is running distutils, they could use this flaw to gain access to that user's .pypirc file, which can contain usernames and passwords for code repositories. (CVE-2011-4944)

All Python users should upgrade to these updated packages, which contain backported patches to correct these issues.

Python is an interpreted, interactive, object-oriented programming language.

A denial of service flaw was found in the implementation of associative arrays (dictionaries) in Python. An attacker able to supply a large number of inputs to a Python application (such as HTTP POST request parameters sent to a web application) that are used as keys when inserting data into an array could trigger multiple hash function collisions, making array operations take an excessive amount of CPU time. To mitigate this issue, randomization has been added to the hash function to reduce the chance of an attacker successfully causing intentional collisions. (CVE-2012-1150)

Note: The hash randomization is not enabled by default as it may break applications that incorrectly depend on dictionary ordering. To enable the protection, the new 'PYTHONHASHSEED' environment variable or the Python interpreter's '-R' command line option can be used. Refer to the python(1) manual page for details.

The previous expat erratum must be installed with this update, which adds hash randomization to the Expat library used by the Python pyexpat module.

A flaw was found in the way the Python SimpleXMLRPCServer module handled clients disconnecting prematurely. A remote attacker could use this flaw to cause excessive CPU consumption on a server using SimpleXMLRPCServer. (CVE-2012-0845)

A flaw was found in the way the Python SimpleHTTPServer module generated directory listings. An attacker able to upload a file with a specially crafted name to a server could possibly perform a cross-site scripting (XSS) attack against victims visiting a listing page generated by SimpleHTTPServer, for a directory containing the crafted file (if the victims were using certain web browsers). (CVE-2011-4940)

A race condition was found in the way the Python distutils module set file permissions during the creation of the .pypirc file. If a local user had access to the home directory of another user who is running distutils, they could use this flaw to gain access to that user's .pypirc file, which can contain usernames and passwords for code repositories. (CVE-2011-4944)

All Python users should upgrade to these updated packages, which contain backported patches to correct these issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
68546	Oracle Linux 5 : python (ELSA-2012-0745)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
62944	VMSA-2012-0016 : VMware security updates for vSphere API and ESX Service Console	Nessus	VMware ESX Local Security Checks	2012/11/16	2021/1/6	high
133259	SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2020:0234-1) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	2020/1/27	2024/3/28	critical
66129	Mandriva Linux Security Advisory : python (MDVSA-2013:117)	Nessus	Mandriva Local Security Checks	2013/4/20	2021/1/6	low
133036	SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2020:0114-1) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	2020/1/17	2024/3/29	critical
133172	openSUSE Security Update : python3 (openSUSE-2020-86) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	2020/1/22	2024/3/29	critical
284264	MiracleLinux 4 : python-2.6.6-29.AXS4.2 (AXSA:2012-663:02)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	medium
284388	MiracleLinux 3 : python-2.4.3-46.2.0.1.AXS3 (AXSA:2012-569:02)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	medium
61332	Scientific Linux Security Update : python on SL5.x i386/x86_64 (20120618)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
61333	Scientific Linux Security Update : python on SL6.x i386/x86_64 (20120618)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium

检测

插件搜索

high

high

critical

low

critical

critical

medium

medium

medium

medium