This collective update for Apache provides the following fixes :

  - Make sure that input that has already arrived on the     socket is not discarded during a non-blocking read     (read(2) returns 0 and errno is set to -EAGAIN).
    (bnc#815621)

  - Close the connection just before an attempted     re-negotiation if data has been read with pipelining.
    This is done by resetting the keepalive status.
    (bnc#815621)

  - Reset the renegotiation status of a client<->server     connection to RENEG_INIT to prevent falsely assumed     status. (bnc#791794)

  - 'OPTIONS *' internal requests are intercepted by a dummy     filter that kicks in for the OPTIONS method. Apple     iPrint uses 'OPTIONS *' to upgrade the connection to     TLS/1.0 following RFC 2817. For compatibility, check if     an Upgrade request header is present and skip the filter     if yes. (bnc#791794)

  - Sending a MERGE request against a URI handled by     mod_dav_svn with the source href (sent as part of the     request body as XML) pointing to a URI that is not     configured for DAV will trigger a segfault. (bnc#829056,     CVE-2013-1896)

  - Client data written to the RewriteLog must have terminal     escape sequences escaped. (bnc#829057, CVE-2013-1862)

IBM WebSphere Application Server 6.1 before Fix Pack 47 appears to be running on the remote host.  As such, it is potentially affected by the following vulnerabilities :

  - A remote attacker can bypass authentication because of     improper user validation on Linux, Solaris, and HP-UX     platforms that use a LocalOS registry.
    (CVE-2013-0543, PM75582)

  - A denial of service can be caused by the way Apache     Ant uses bzip2 to compress files. This can be exploited     by a local attacker passing specially crafted input.
    (CVE-2012-2098, PM90088)

  - A local attacker can cause a denial of service on     Windows platforms with a LocalOS registry using     WebSphere Identity Manager. (CVE-2013-0541, PM74909)

  - Remote attackers can traverse directories by deploying     a specially crafted application file to overwrite files     outside of the application deployment directory.
    (CVE-2012-3305, PM62467)

  - The TLS protocol implementation is susceptible to     plaintext-recovery attacks via statistical analysis of     timing data for crafted packets. (CVE-2013-0169,     PM85211)

  - Terminal escape sequences are not properly filtered from     logs. Remote attackers could execute arbitrary commands     via an HTTP request containing an escape sequence.
    (CVE-2013-1862, PM87808)

  - Improper validation of user input allows for cross-site     request forgery. By persuading an authenticated user     to visit a malicious website, a remote attacker could     exploit this vulnerability to obtain sensitive     information. (CVE-2012-4853, CVE-2013-3029, PM62920,     PM88746)

  - Improper validation of user input in the administrative     console allows for multiple cross-site scripting     attacks. (CVE-2013-0458, CVE-2013-0459, CVE-2013-0461,     CVE-2013-0542, CVE-2013-0596, CVE-2013-2967,     CVE-2013-4005, CVE-2013-4052, PM71139, PM72536, PM71389,     PM73445, PM78614, PM81846, PM88208, PM91892)

  - Improper validation of portlets in the administrative     console allows for cross-site request forgery, which     could allow an attacker to obtain sensitive information.
    (CVE-2013-0460, PM72275)

  - Remote, authenticated attackers can traverse directories     on Linux and UNIX systems running the application.
    (CVE-2013-0544, PM82468)

  - A denial of service attack is possible if the optional     mod_dav module is being used. (CVE-2013-1896, PM89996)

  - Sensitive information can be obtained by a local     attacker because of incorrect caching by the     administrative console. (CVE-2013-2976, PM79992)

  - An attacker may gain elevated privileges because of     improper certificate checks. WS-Security and XML Digital     Signatures must be enabled. (CVE-2013-4053, PM90949,     PM91521)

  - Deserialization of a maliciously crafted OpenJPA object     can result in an executable file being written to the     file system. WebSphere is NOT vulnerable to this issue     but the vendor suggests upgrading to be proactive.
    (CVE-2013-1768, PM86780, PM86786, PM86788, PM86791)

The remote host is running a version of Mac OS X 10.7 or 10.8 that does not have Security Update 2014-001 applied. This update contains several security-related fixes for the following components :

  - Apache
  - App Sandbox
  - ATS
  - Certificate Trust Policy
  - CFNetwork Cookies
  - CoreAnimation
  - Date and Time
  - File Bookmark
  - ImageIO
  - IOSerialFamily
  - LaunchServices
  - NVIDIA Drivers
  - PHP
  - QuickLook
  - QuickTime
  - Secure Transport

Note that successful exploitation of the most serious issues could result in arbitrary code execution.

- httpd-2.2.x-bnc829056-CVE-2013-1896-pr1482522-mod_dav.diff CVE-2013-1896: Sending a MERGE request against a URI handled by mod_dav_svn with the source href   (sent as part of the request body as XML) pointing to a URI that is not configured for DAV will trigger a segfault. [bnc#829056]

- httpd-2.2.x-bnc829057-CVE-2013-1862-mod_rewrite_terminal_escape_sequences.diff CVE-2013-1862: client data written to the RewriteLog must have terminal escape sequences escaped. [bnc#829057]

The version of JBoss Enterprise Application Platform installed on the remote system is affected by the following issues :

  - Flaws in the mod_info, mod_status, mod_imagemap,     mod_ldap, and mod_proxy_ftp modules can allow an     attacker to perform cross-site scripting (XSS) attacks.
    (CVE-2012-3499)

  - Flaws in the web interface of the mod_proxy_balancer     module can allow a remote attacker to perform XSS     attacks. (CVE-2012-4558)

  - A flaw in mod_rewrite can allow remote attackers to     execute arbitrary commands via an HTTP request     containing an escape sequence for a terminal emulator.
    (CVE-2013-1862)

  - A flaw in the method by which the mod_dav module     handles merge requests can allow an attacker to create     a denial of service by sending a crafted merge request     that contains URIs that are not configured for DAV.
    (CVE-2013-1896)

  - A flaw in PicketBox can allow local users to obtain the     admin encryption key by reading the Vault data file.
    (CVE-2013-1921)

  - A flaw in Apache Santuario XML Security can allow     context-dependent attackers to spoof an XML Signature     by using the CanonicalizationMethod parameter to     specify an arbitrary weak algorithm. (CVE-2013-2172)

  - A flaw in JGroup's DiagnosticsHandler can allow remote     attackers to obtain sensitive information and execute     arbitrary code by re-using valid credentials.
    (CVE-2013-4112)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
69474	SuSE 11.2 / 11.3 Security Update : Apache2 (SAT Patch Numbers 8137 / 8138)	Nessus	SuSE Local Security Checks	2013/8/27	2021/1/19	medium
70022	IBM WebSphere Application Server 6.1 < Fix Pack 47 Multiple Vulnerabilities	Nessus	Web Servers	2013/9/20	2022/12/5	critical
72688	Mac OS X Multiple Vulnerabilities (Security Update 2014-001) (BEAST)	Nessus	MacOS X Local Security Checks	2014/2/25	2024/5/28	critical
75109	openSUSE Security Update : apache2 (openSUSE-SU-2013:1337-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
72238	JBoss Enterprise Application Platform 6.1.1 Update (RHSA-2013:1209)	Nessus	Red Hat Local Security Checks	2014/1/31	2022/4/11	medium

检测

插件搜索

medium

critical

critical

medium

medium