The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2015-476:01 advisory.

    The Apache HTTP Server is a powerful, efficient, and extensible     web server.
    With this release, following issue has been fixed:
    CVE-2015-3183

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2686-1 advisory.

    It was discovered that the Apache HTTP Server incorrectly parsed chunk headers. A remote attacker could     possibly use this issue to perform HTTP request smuggling attacks. (CVE-2015-3183)

    It was discovered that the Apache HTTP Server incorrectly handled the ap_some_auth_required API. A remote     attacker could possibly use this issue to bypass intended access restrictions. This issue only affected     Ubuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-3185)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated httpd packages that fix two security issues are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Multiple flaws were found in the way httpd parsed HTTP requests and responses using chunked transfer encoding. A remote attacker could use these flaws to create a specially crafted request, which httpd would decode differently from an HTTP proxy software in front of it, possibly leading to HTTP request smuggling attacks. (CVE-2015-3183)

It was discovered that in httpd 2.4, the internal API function ap_some_auth_required() could incorrectly indicate that a request was authenticated even when no authentication was used. An httpd module using this API function could consequently allow access that should have been denied. (CVE-2015-3185)

All httpd users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd service will be restarted automatically.

Multiple flaws were found in the way httpd parsed HTTP requests and responses using chunked transfer encoding. A remote attacker could use these flaws to create a specially crafted request, which httpd would decode differently from an HTTP proxy software in front of it, possibly leading to HTTP request smuggling attacks. (CVE-2015-3183)

It was discovered that in httpd 2.4, the internal API function ap_some_auth_required() could incorrectly indicate that a request was authenticated even when no authentication was used. An httpd module using this API function could consequently allow access that should have been denied. (CVE-2015-3185)

After installing the updated packages, the httpd service will be restarted automatically.

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.5. It is, therefore, affected by multiple vulnerabilities in the following components :

  - apache
  - apache_mod_php
  - Apple ID OD Plug-in
  - AppleGraphicsControl
  - Bluetooth
  - bootp
  - CloudKit
  - CoreMedia Playback
  - CoreText
  - curl
  - Data Detectors Engine
  - Date & Time pref pane
  - Dictionary Application
  - DiskImages
  - dyld
  - FontParser
  - groff
  - ImageIO
  - Install Framework Legacy
  - IOFireWireFamily
  - IOGraphics
  - IOHIDFamily
  - Kernel
  - Libc
  - Libinfo
  - libpthread
  - libxml2
  - libxpc
  - mail_cmds
  - Notification Center OSX
  - ntfs
  - OpenSSH
  - OpenSSL
  - perl
  - PostgreSQL
  - python
  - QL Office
  - Quartz Composer Framework
  - Quick Look
  - QuickTime 7
  - SceneKit
  - Security
  - SMBClient
  - Speech UI
  - sudo
  - tcpdump
  - Text Formats
  - udf 

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

Apache2 was updated to fix security issues.

  - CVE-2015-3185: The ap_some_auth_required function in     server/request.c in the Apache HTTP Server 2.4.x did not     consider that a Require directive may be associated with     an authorization setting rather than an authentication     setting, which allows remote attackers to bypass     intended access restrictions in opportunistic     circumstances by leveraging the presence of a module     that relies on the 2.2 API behavior. [bnc#938723]

  - CVE-2015-3183: The chunked transfer coding     implementation in the Apache HTTP Server did not     properly parse chunk headers, which allows remote     attackers to conduct HTTP request smuggling attacks via     a crafted request, related to mishandling of large     chunk-size values and invalid chunk-extension characters     in modules/http/http_filters.c. [bnc#938728]

On openSUSE 13.1 :

  - CVE-2015-4000: Fix Logjam vulnerability: change the     default SSLCipherSuite cipherstring to disable export     cipher suites and deploy Ephemeral Elliptic-Curve     Diffie-Hellman (ECDHE) ciphers. Adjust 'gensslcert'     script to generate a strong and unique Diffie Hellman     Group and append it to the server certificate file     [bnc#931723].

Jim Jagielski reports :

CVE-2015-3183 (cve.mitre.org) core: Fix chunk header parsing defect.
Remove apr_brigade_flatten(), buffering and duplicated code from the HTTP_IN filter, parse chunks in a single pass with zero copy. Limit accepted chunk-size to 2^63-1 and be strict about chunk-ext authorized characters.

CVE-2015-3185 (cve.mitre.org) Replacement of ap_some_auth_required (unusable in Apache httpd 2.4) with new ap_some_authn_required and ap_force_authn hook.

CVE-2015-0253 (cve.mitre.org) core: Fix a crash with ErrorDocument 400 pointing to a local URL-path with the INCLUDES filter active, introduced in 2.4.11. PR 57531.

CVE-2015-0228 (cve.mitre.org) mod_lua: A maliciously crafted websockets PING after a script calls r:wsupgrade() can cause a child process crash.

Apache Foundation reports :

CVE-2015-3183 core: Fix chunk header parsing defect. Remove apr_brigade_flatten(), buffering and duplicated code from the HTTP_IN filter, parse chunks in a single pass with zero copy. Limit accepted chunk-size to 2^63-1 and be strict about chunk-ext authorized characters.

Update to new version 2.4.16. This update fixed various bugs as well as few security issues.

For full changelog, see http://www.apache.org/dist/httpd/CHANGES_2.4.16

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A vulnerability has been found in the Apache HTTP Server.

CVE-2015-3183

Apache HTTP Server did not properly parse chunk headers, which allowed remote attackers to conduct HTTP request smuggling via a crafted request. This flaw relates to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c.

For the squeeze distribution, these issues have been fixed in version 2.2.16-6+squeeze15 of apache2.

We recommend you to upgrade your apache2 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated httpd packages that fix one security issue are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Multiple flaws were found in the way httpd parsed HTTP requests and responses using chunked transfer encoding. A remote attacker could use these flaws to create a specially crafted request, which httpd would decode differently from an HTTP proxy software in front of it, possibly leading to HTTP request smuggling attacks. (CVE-2015-3183)

All httpd users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the updated packages, the httpd service will be restarted automatically.

The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c.

The version of Oracle Secure Global Desktop installed on the remote host is version 4.63 / 4.71 / 5.2 and is missing a security patch from the January 2016 Critical Patch Update (CPU). It is, therefore, affected by the following vulnerabilities :

  - A flaw exists in the bundled version of Apache HTTP     Server in the chunked transfer coding implementation due     to a failure to properly parse chunk headers. A remote     attacker can exploit this to conduct HTTP request     smuggling attacks. (CVE-2015-3183)

  - A man-in-the-middle vulnerability, known as Logjam,     exists due to a flaw in the SSL/TLS protocol. A remote     attacker can exploit this flaw to downgrade connections     using ephemeral Diffie-Hellman key exchange to 512-bit     export-grade cryptography. (CVE-2015-4000)

  - An unspecified flaw exists in the SGD Core subcomponent     that allows a remote attacker to cause a denial of     service condition. (CVE-2016-0501)

Updated httpd and httpd22 packages that fix two security issues are now available for Red Hat JBoss Web Server 2.1.0 for Red Hat Enterprise Linux 5, 6, and 7.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available from the CVE links in the References section.

Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.

Multiple flaws were found in the way httpd parsed HTTP requests and responses using chunked transfer encoding. A remote attacker could use these flaws to create a specially crafted request, which httpd would decode differently from an HTTP proxy software in front of it, possibly leading to HTTP request smuggling attacks. (CVE-2015-3183)

A flaw was found in the way httpd handled HTTP Trailer headers when processing requests using chunked encoding. A malicious client could use Trailer headers to set additional HTTP headers after header processing was performed by other modules. This could, for example, lead to a bypass of header restrictions defined with mod_headers.
(CVE-2013-5704)

Users of httpd or httpd22 are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.
After installing the updated packages, the httpd or httpd22 service must be restarted manually for this update to take effect.

Updated Red Hat JBoss Web Server 3.0.2 packages are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and prevent further, legitimate connections to the Tomcat server.
(CVE-2014-0230)

A flaw was found in the way httpd handled HTTP Trailer headers when processing requests using chunked encoding. A malicious client could use Trailer headers to set additional HTTP headers after header processing was performed by other modules. This could, for example, lead to a bypass of header restrictions defined with mod_headers.
(CVE-2013-5704)

Multiple flaws were found in the way httpd parsed HTTP requests and responses using chunked transfer encoding. A remote attacker could use these flaws to create a specially crafted request, which httpd would decode differently from an HTTP proxy software in front of it, possibly leading to HTTP request smuggling attacks. (CVE-2015-3183)

* This enhancement update adds the Red Hat JBoss Web Server 3.0.2 packages to Red Hat Enterprise Linux 6. These packages provide a number of enhancements over the previous version of Red Hat JBoss Web Server. (JIRA#JWS-228)

Users of Red Hat JBoss Web Server are advised to upgrade to these updated packages, which add this enhancement.

The remote host is affected by the vulnerability described in GLSA-201610-02 (Apache: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Apache HTTP Server.
      Please review the CVE identifiers referenced below for details.
  Impact :

    Remote attackers could bypass intended access restrictions, conduct HTTP       request smuggling attacks, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
289496	MiracleLinux 4 : httpd-2.2.15-47.0.1.AXS4 (AXSA:2015-476:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
85042	Ubuntu 14.04 LTS : Apache HTTP Server vulnerabilities (USN-2686-1)	Nessus	Ubuntu Local Security Checks	2015/7/28	2025/9/3	high
85617	RHEL 7 : httpd (RHSA-2015:1667)	Nessus	Red Hat Local Security Checks	2015/8/25	2019/10/24	medium
85621	Scientific Linux Security Update : httpd on SL7.x x86_64 (20150824)	Nessus	Scientific Linux Local Security Checks	2015/8/25	2021/1/14	medium
85408	Mac OS X 10.10.x < 10.10.5 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2015/8/17	2024/5/28	high
86285	openSUSE Security Update : apache2 (openSUSE-2015-635) (Logjam)	Nessus	SuSE Local Security Checks	2015/10/6	2022/12/5	low
84781	FreeBSD : apache24 -- multiple vulnerabilities (a12494c1-2af4-11e5-86ff-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	2015/7/16	2021/1/6	medium
84860	FreeBSD : apache22 -- chunk header parsing defect (29083f8e-2ca8-11e5-86ff-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	2015/7/20	2021/1/6	medium
84906	Fedora 22 : httpd-2.4.16-1.fc22 (2015-11689)	Nessus	Fedora Local Security Checks	2015/7/22	2021/1/11	medium
85051	Debian DLA-284-1 : apache2 security update	Nessus	Debian Local Security Checks	2015/7/29	2021/1/11	medium
85092	Fedora 21 : httpd-2.4.16-1.fc21 (2015-11792)	Nessus	Fedora Local Security Checks	2015/7/30	2021/1/11	medium
85637	CentOS 6 : httpd (CESA-2015:1668)	Nessus	CentOS Local Security Checks	2015/8/26	2021/1/4	medium
91329	F5 Networks BIG-IP : Apache vulnerability (SOL17251)	Nessus	F5 Networks Local Security Checks	2016/5/26	2021/3/10	medium
88049	Oracle Secure Global Desktop Multiple Vulnerabilities (January 2016 CPU) (Logjam)	Nessus	Misc.	2016/1/21	2022/12/5	medium
88077	RHEL 5 / 6 / 7 : JBoss Web Server (RHSA-2016:0061)	Nessus	Red Hat Local Security Checks	2016/1/22	2019/10/24	medium
87457	RHEL 6 : JBoss Web Server (RHSA-2015:2659)	Nessus	Red Hat Local Security Checks	2015/12/17	2021/2/5	medium
93903	GLSA-201610-02 : Apache: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2016/10/7	2026/1/22	high

检测

插件搜索

high

high

medium

medium

high

low

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high