The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0561 advisory.

    - fix re-use of wrong HTTP NTLM connection (CVE-2014-0015)
    - fix connection re-use when using different log-in credentials (CVE-2014-0138)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The VMware vCenter Server installed on the remote host is version 5.0 prior to Update 3c, 5.1 prior to Update 3, or 5.5 prior to Update 2.
It is, therefore, affected by multiple vulnerabilities in third party libraries :

  - Due to improper certificate validation when connecting     to a CIM server on an ESXi host, an attacker can     perform man-in-the-middle attacks. (CVE-2014-8371)

  - The bundled version of Oracle JRE is prior to 1.6.0_81     and thus is affected by multiple vulnerabilities. Note     that this only affects version 5.1 and 5.0 of vCenter     but is only fixed in 5.1 Update 3.

The remote NewStart CGSL host, running version MAIN 6.02, has curl packages installed that are affected by multiple vulnerabilities:

  - The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is     enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary     requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3)     execute arbitrary commands via a redirect to an scp: URL. (CVE-2009-0037)

  - The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl     and other products, always performs credential delegation during GSSAPI authentication, which allows     remote servers to impersonate clients via GSSAPI requests. (CVE-2011-2192)

  - curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a     pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as     demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol. (CVE-2012-0036)

  - Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl     and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote     attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in     the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message. (CVE-2013-0249)

  - The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path     domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the     domain of a URL. (CVE-2013-1944)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-397:01 advisory.

    cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using     any of the supported protocols. cURL is designed to work without user interaction or any kind of     interactivity. cURL offers many useful capabilities, like proxy support, user authentication, FTP upload,     HTTP post, and file transfer resume.
    Security issues fixed with this release:
     CVE-2014-0015     cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM     connections, which might allow context-dependent attackers to authenticate as other users via a request.
     CVE-2014-0138     The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3,     (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might     allow context-dependent attackers to connect as other users via a request, a similar issue to     CVE-2014-0015.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

fix connection re-use when using different log-in credentials (CVE-2014-0138)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015 .

- Update to 7.37.0

    - Fixes CVE-2014-0138 and CVE-2014-0139 (RHBZ #1080880)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the web server's banner, the version of HP System Management Homepage (SMH) hosted on the remote web server is prior to 7.2.6. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries :

  - HP SMH (XSRF)
    - libcurl
    - OpenSSL

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
74203	Oracle Linux 6 : curl (ELSA-2014-0561)	Nessus	Oracle Linux Local Security Checks	2014/5/28	2025/4/29	critical
79865	VMware Security Updates for vCenter Server (VMSA-2014-0012)	Nessus	Misc.	2014/12/12	2018/11/15	critical
206854	NewStart CGSL MAIN 6.02 : curl Multiple Vulnerabilities (NS-SA-2024-0050)	Nessus	NewStart CGSL Local Security Checks	2024/9/10	2024/9/10	critical
289438	MiracleLinux 4 : curl-7.19.7-37.AXS4.3 (AXSA:2014-397:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
73263	Fedora 20 : curl-7.32.0-8.fc20 (2014-4436)	Nessus	Fedora Local Security Checks	2014/3/31	2021/1/11	medium
73650	Amazon Linux AMI : curl (ALAS-2014-322)	Nessus	Amazon Linux Local Security Checks	2014/4/23	2018/4/18	medium
74406	Fedora 20 : mingw-curl-7.37.0-1.fc20 (2014-6912)	Nessus	Fedora Local Security Checks	2014/6/10	2021/1/11	medium
74408	Fedora 19 : mingw-curl-7.37.0-1.fc19 (2014-6921)	Nessus	Fedora Local Security Checks	2014/6/10	2021/1/11	medium
90251	HP System Management Homepage < 7.2.6 Multiple Vulnerabilities (FREAK)	Nessus	Web Servers	2016/3/29	2022/4/11	high

检测

插件搜索

critical

critical

critical

critical

medium

medium

medium

medium

high