The remote host is affected by the vulnerability described in GLSA-201504-01 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Firefox, Thunderbird,       and SeaMonkey. Please review the CVE identifiers referenced below for       details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information, spoof       the address bar, conduct clickjacking attacks, bypass security       restrictions and protection mechanisms,  or have other unspecified       impact.
  Workaround :

    There are no known workarounds at this time.

The remote host is running an unpatched version of Oracle Traffic Director that is affected by the following vulnerabilities :

  - The implementation of Network Security Services (NSS)     does not ensure that data structures are initialized,     which could result in a denial of service or disclosure     of sensitive information. (CVE-2013-1739)

  - The implementation of Network Security Services (NSS)     does not properly handle the TLS False Start feature     and could allow man-in-the-middle attacks.
    (CVE-2013-1740)

  - NSS contains an integer overflow flaw that allows     remote attackers to cause a denial of service.
    (CVE-2013-1741)

  - An error exists in the 'Null_Cipher' function in the     file 'ssl/ssl3con.c' related to handling invalid     handshake packets that could allow arbitrary code     execution. (CVE-2013-5605)

  - An error exists in the 'CERT_VerifyCert' function in     the file 'lib/certhigh/certvfy.c' that could allow     invalid certificates to be treated as valid.
    (CVE-2013-5606)

  - Network Security Services (NSS) contains a race     condition in libssl that occurs during session ticket     processing. A remote attacker can exploit this flaw     to cause a denial of service. (CVE-2014-1490)

  - Network Security Services (NSS) does not properly     restrict public values in Diffie-Hellman key exchanges,     allowing a remote attacker to bypass cryptographic     protection mechanisms. (CVE-2014-1491)

  - An issue exists in the Network Security (NSS) library     due to improper handling of IDNA domain prefixes for     wildcard certificates. This issue could allow man-in-     the-middle attacks. (CVE-2014-1492)

The Oracle OpenSSO agent installed on the remote host is missing a vendor-supplied update. It is, therefore, affected by multiple vulnerabilities in the bundled Mozilla Network Security Services, the most serious of which can allow remote code execution.

The installed version of SeaMonkey is a version prior to 2.26 and is, therefore, potentially affected by the following vulnerabilities :

  - An issue exists in the Network Security (NSS) library     due to improper handling of IDNA domain prefixes for     wildcard certificates. This issue could allow man-in-     the-middle attacks. (CVE-2014-1492)

  - Memory issues exist that could lead to arbitrary code     execution. (CVE-2014-1518, CVE-2014-1519)

  - An out-of-bounds read issue exists in the Web Audio     feature that could lead to information disclosure.
    (CVE-2014-1522)

  - An out-of-bounds read issue exists when decoding     certain JPG images that could lead to a denial of     service. (CVE-2014-1523)

  - A memory corruption issue exists due to improper     validation of XBL objects that could lead to arbitrary     code execution. (CVE-2014-1524)

  - A use-after-free memory issue exists in the Text Track     Manager during HTML video processing that could lead     to arbitrary code execution. (CVE-2014-1525)

  - An issue exists related to the debugger bypassing     XrayWrappers that could lead to privilege escalation.
    (CVE-2014-1526)

  - An out-of-bounds write issue exists in the Cairo     graphics library that could lead to arbitrary code     execution.	Note that this issue only affects Firefox     28 and SeaMonkey prior to version 2.26. (CVE-2014-1528)

  - A security bypass issue exists in the Web Notification     API that could lead to arbitrary code execution.
    (CVE-2014-1529)

  - A cross-site scripting issue exists that could allow an     attacker to load another website other than the URL for     the website that is shown in the address bar.
    (CVE-2014-1530)

  - A use-after-free issue exists due to an 'imgLoader'     object being freed when being resized.  This issue     could lead to arbitrary code execution. (CVE-2014-1531)

  - A use-after-free issue exists during host resolution     that could lead to arbitrary code execution.
    (CVE-2014-1532)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-467:02 advisory.

    Description :
    nss     Network Security Services (NSS) is a set of libraries designed to     support cross-platform development of security-enabled client and     server applications. Applications built with NSS can support SSL v2     and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509     v3 certificates, and other security standards.
    nspr     NSPR provides platform independence for non-GUI operating system     facilities. These facilities include threads, thread synchronization,     normal file and network I/O, interval timing and calendar time, basic     memory management (malloc and free) and shared library linking.
    nss-util     Utilities for Network Security Services and the Softoken module     Security issues fixed with this release:
    CVE-2013-1740     The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before     3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL     servers by using an arbitrary X.509 certificate during certain handshake traffic.
    CVE-2014-1490     Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla     Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and     other products, allows remote attackers to cause a denial of service (use-after-free) or possibly have     unspecified other impact via vectors involving a resumption handshake that triggers incorrect replacement     of a session ticket.
    CVE-2014-1491     Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR     24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly     restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to     bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.
    CVE-2014-1492     The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in     Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an     internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL     servers via a crafted certificate.
    CVE-2014-1544     Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network     Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird     before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper     removal of an NSSCertificate structure from a trust domain.
    CVE-2014-1545     Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code     or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console     functions.
    enhancement;
    The nss ans nss-util package has been upgraded to upstream version 3.16.1,     and the nspr package has been upgraded to upstream version 4.10.6.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2185-1 advisory.

    Bobby Holley, Carsten Book, Christoph Diehl, Gary Kwong, Jan de Mooij, Jesse Ruderman, Nathan Froyd, John     Schoenick, Karl Tomlinson, Vladimir Vukicevic and Christian Holler discovered multiple memory safety     issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could     potentially exploit these to cause a denial of service via application crash, or execute arbitrary code     with the privileges of the user invoking Firefox. (CVE-2014-1518, CVE-2014-1519)

    An out of bounds read was discovered in Web Audio. An attacker could potentially exploit this cause a     denial of service via application crash or execute arbitrary code with the privileges of the user invoking     Firefox. (CVE-2014-1522)

    Abhishek Arya discovered an out of bounds read when decoding JPG images. An attacker could potentially     exploit this to cause a denial of service via application crash. (CVE-2014-1523)

    Abhishek Arya discovered a buffer overflow when a script uses a non-XBL object as an XBL object. An     attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking     Firefox. (CVE-2014-1524)

    Abhishek Arya discovered a use-after-free in the Text Track Manager when processing HTML video. An     attacker could potentially exploit this to cause a denial of service via application crash or execute     arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1525)

    Jukka Jylnki discovered an out-of-bounds write in Cairo when working with canvas in some circumstances.
    An attacker could potentially exploit this to cause a denial of service via application crash or execute     arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1528)

    Mariusz Mlynski discovered that sites with notification permissions can run script in a privileged context     in some circumstances. An attacker could exploit this to execute arbitrary code with the privileges of the     user invoking Firefox. (CVE-2014-1529)

    It was discovered that browser history navigations could be used to load a site with the addressbar     displaying the wrong address. An attacker could potentially exploit this to conduct cross-site scripting     or phishing attacks. (CVE-2014-1530)

    A use-after-free was discovered when resizing images in some circumstances. An attacker could potentially     exploit this to cause a denial of service via application crash or execute arbitrary code with the     privileges of the user invoking Firefox. (CVE-2014-1531)

    Christian Heimes discovered that NSS did not handle IDNA domain prefixes correctly for wildcard     certificates. An attacker could potentially exploit this by using a specially crafted certificate to     conduct a machine-in-the-middle attack. (CVE-2014-1492)

    Tyson Smith and Jesse Schwartzentruber discovered a use-after-free during host resolution in some     circumstances. An attacker could potentially exploit this to cause a denial of service via application     crash or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1532)

    Boris Zbarsky discovered that the debugger bypassed XrayWrappers for some objects. If a user were tricked     in to opening a specially crafted website whilst using the debugger, an attacker could potentially exploit     this to execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1526)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

CVE-2013-1741

Runaway memset in certificate parsing on 64-bit computers leading to a crash by attempting to write 4Gb of nulls.

CVE-2013-5606

Certificate validation with the verifylog mode did not return validation errors, but instead expected applications to determine the status by looking at the log.

CVE-2014-1491

Ticket handling protection mechanisms bypass due to the lack of restriction of public values in Diffie-Hellman key exchanges.

CVE-2014-1492

Incorrect IDNA domain name matching for wildcard certificates could allow specially crafted invalid certificates to be considered as valid.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
82632	GLSA-201504-01 : Mozilla Products: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2015/4/8	2021/1/11	critical
76938	Oracle Traffic Director Multiple Vulnerabilities (July 2014 CPU)	Nessus	Misc.	2014/7/31	2018/11/15	high
78774	Oracle OpenSSO Agent Multiple Vulnerabilities (October 2014 CPU)	Nessus	CGI abuses	2014/10/31	2022/4/11	high
73771	SeaMonkey < 2.26 Multiple Vulnerabilities	Nessus	Windows	2014/4/29	2026/5/27	critical
289418	MiracleLinux 4 : nss-3.16.1-4.AXS4, nss-util-3.16.1-1.AXS4,nspr-4.10.6-1.AXS4 (AXSA:2014-467:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
73786	Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2185-1)	Nessus	Ubuntu Local Security Checks	2014/4/30	2024/8/27	critical
82171	Debian DLA-23-1 : nss security update	Nessus	Debian Local Security Checks	2015/3/26	2021/1/11	high

检测

插件搜索

critical

high

high

critical

critical

critical

high