The firmware of the remote Fortinet host is running a version of OpenSSL that is affected by a remote information disclosure, commonly known as the 'Heartbleed' bug. A remote, unauthenticated, attacker could potentially exploit this vulnerability to extract up to 64 kilobytes of memory per request from the device.

The BlackBerry Enterprise Service (BES) install on the remote host is affected by an out-of-bounds read error, known as the 'Heartbleed Bug' in the included OpenSSL version.

This error is related to handling TLS heartbeat extensions that could allow an attacker to obtain sensitive information such as primary key material, secondary key material, and other protected content. Note this affects both client and server modes of operation.

The remote host is running a version of McAfee ePolicy Orchestrator that is affected by an information disclosure due to a flaw in the OpenSSL library, commonly known as the Heartbleed bug. An attacker could potentially exploit this vulnerability repeatedly to read up to 64KB of memory from the device.

The remote host has a version of McAfee Firewall Enterprise installed that is affected by an out-of-bounds read error, known as Heartbleed, in the TLS/DTLS implementation due to improper handling of TLS heartbeat extension packets. A remote attacker, using crafted packets, can trigger a buffer over-read, resulting in the disclosure of up to 64KB of process memory, which contains sensitive information such as primary key material, secondary key material, and other protected content.

The remote host is running a version of McAfee Web Gateway (MWG) that is affected by an information disclosure vulnerability due to a flaw in the OpenSSL library, commonly known as the Heartbleed bug. An attacker could potentially exploit this vulnerability repeatedly to read up to 64KB of memory from the device.

a. Information Disclosure vulnerability in OpenSSL third-party library

   The OpenSSL library is updated to version openssl-1.0.1g to    resolve multiple security issues.
    The Common Vulnerabilities and Exposures project (cve.mitre.org) has    assigned the names CVE-2014-0076 and CVE-2014-0160 to these issues.

   CVE-2014-0160 is known as the Heartbleed issue. More information    on this issue may be found in the reference section.

   To remediate the issue for products that have updated versions or    patches available, perform these steps: 

     * Deploy the VMware product update or product patches
     * Replace certificates per the product-specific documentation
     * Reset passwords per the product-specific documentation

   Section 4 lists product-specific references to installation    instructions and certificate management documentation.

According to its self-reported version number, the firmware installed on the remote host is affected by an information disclosure vulnerability.

An out-of-bounds read error, known as the 'Heartbleed Bug', exists related to handling TLS heartbeat extensions that could allow an attacker to obtain sensitive information such as primary key material, secondary key material, and other protected content.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A version of IBM General Parallel File System (GPFS) prior to 3.5.0.17 is installed on the remote host. It is, therefore, affected by multiple vulnerabilities related to OpenSSL:

  - An information disclosure vulnerability exists due to a     flaw in the OpenSSL library, due to an implementation     error in ECDSA (Elliptic Curve Digital Signature     Algorithm). An attacker could potentially exploit this     vulnerability to recover ECDSA nonces. (CVE-2014-0076)

  - An information disclosure vulnerability exists due to a     flaw in the OpenSSL library, commonly known as the     Heartbleed bug. An attacker could potentially exploit     this vulnerability repeatedly to read up to 64KB of     memory from the device. (CVE-2014-0160)

Updated tor packages fix multiple vulnerabilities :

Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting on Intel Sandy Bridge and Ivy Bridge platforms, does not properly generate random numbers for relay identity keys and hidden-service identity keys, which might make it easier for remote attackers to bypass cryptographic protection mechanisms via unspecified vectors (CVE-2013-7295).

Update to version 0.2.4.22 solves these major and security problems :

  - Block authority signing keys that were used on     authorities vulnerable to the heartbleed bug in OpenSSL     (CVE-2014-0160).

  - Fix a memory leak that could occur if a microdescriptor     parse fails during the tokenizing step.

  - The relay ciphersuite list is now generated     automatically based on uniform criteria, and includes     all OpenSSL ciphersuites with acceptable strength and     forward secrecy.

  - Relays now trust themselves to have a better view than     clients of which TLS ciphersuites are better than     others.

  - Clients now try to advertise the same list of     ciphersuites as Firefox 28.

For other changes see the upstream change log

This is an openssl version update to 1.0.1g.

  - The main reason for this upgrade was to be clear about     the TLS heartbeat problem know as 'Heartbleed'     (CVE-2014-0160). That problem was already fixed in our     previous openssl update.

- tor 0.2.4.22 [bnc#878486] Tor was updated to the     recommended version of the 0.2.4.x series.

  - major features in 0.2.4.x :

  - improved client resilience

  - support better link encryption with forward secrecy

  - new NTor circuit handshake

  - change relay queue for circuit create requests from     size-based limit to time-based limit

  - many bug fixes and minor features

  - changes contained in 0.2.4.22: Backports numerous     high-priority fixes. These include blocking all     authority signing keys that may have been affected by     the OpenSSL 'heartbleed' bug, choosing a far more secure     set of TLS ciphersuites by default, closing a couple of     memory leaks that could be used to run a target relay     out of RAM.

  - Major features (security)

  - Block authority signing keys that were used on     authorities vulnerable to the 'heartbleed' bug in     OpenSSL (CVE-2014-0160).

  - Major bugfixes (security, OOM) :

  - Fix a memory leak that could occur if a microdescriptor     parse fails during the tokenizing step.

  - Major bugfixes (TLS cipher selection) :

  - The relay ciphersuite list is now generated     automatically based on uniform criteria, and includes     all OpenSSL ciphersuites with acceptable strength and     forward secrecy.

  - Relays now trust themselves to have a better view than     clients of which TLS ciphersuites are better than     others.

  - Clients now try to advertise the same list of     ciphersuites as Firefox 28.

  - includes changes from 0.2.4.21: Further improves     security against potential adversaries who find breaking     1024-bit crypto doable, and backports several stability     and robustness patches from the 0.2.5 branch.

  - Major features (client security) :

  - When we choose a path for a 3-hop circuit, make sure it     contains at least one relay that supports the NTor     circuit extension handshake. Otherwise, there is a     chance that we're building a circuit that's worth     attacking by an adversary who finds breaking 1024-bit     crypto doable, and that chance changes the game theory.

  - Major bugfixes :

  - Do not treat streams that fail with reason     END_STREAM_REASON_INTERNAL as indicating a definite     circuit failure, since it could also indicate an     ENETUNREACH connection error

  - includes changes from 0.2.4.20 :

  - Do not allow OpenSSL engines to replace the PRNG, even     when HardwareAccel is set.

  - Fix assertion failure when AutomapHostsOnResolve yields     an IPv6 address.

  - Avoid launching spurious extra circuits when a stream is     pending.

  - packaging changes :

  - remove init script shadowing systemd unit

  - general cleanup

  - Add tor-fw-helper for UPnP port forwarding; not used by     default

  - fix logrotate on systemd-only setups without init     scripts, work tor-0.2.2.37-logrotate.patch to     tor-0.2.4.x-logrotate.patch

  - verify source tarball signature

The remote host appears to be running Ipswitch IMail Server 11.x or 12.x older than version 12.4.1.15 and is, therefore, potentially affected by the following vulnerabilities :

  - An error exists related to the implementation of the     Elliptic Curve Digital Signature Algorithm (ECDSA) that     could allow nonce disclosure via the 'FLUSH+RELOAD'     cache side-channel attack. (CVE-2014-0076)

  - An out-of-bounds read error, known as the 'Heartbleed     Bug', exists related to handling TLS heartbeat     extensions that could allow an attacker to obtain     sensitive information such as primary key material,     secondary key material and other protected content.
    (CVE-2014-0160)

  - Multiple input validation errors exist related to the     'WebClient' component that could allow cross-site     scripting attacks. (CVE-2014-3878)

The remote host has a version of SCADA Data Gateway installed that is prior to 3.3.729. It is, therefore, affected by an out-of-bounds read error, known as the 'Heartbleed Bug' in the included OpenSSL version.

This error is related to handling TLS heartbeat extensions that could allow an attacker to obtain sensitive information such as primary key material, secondary key material, and other protected content. Note this affects both client and server modes of operation.

Note that Nessus has not tested for this issue, but has instead relied only on the application's version number.

The RPM installation of HP Version Control Agent (VCA) on the remote Linux host is version 7.2.2, 7.3.0, or 7.3.1. It is, therefore, affected by an information disclosure vulnerability.

An out-of-bounds read error, known as the 'Heartbleed Bug', exists related to handling TLS heartbeat extensions that could allow an attacker to obtain sensitive information such as primary key material, secondary key material, and other protected content.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - fix CVE-2014-3567 - memory leak when handling session     tickets

  - fix CVE-2014-3513 - memory leak in srtp support

  - add support for fallback SCSV to partially mitigate     (CVE-2014-3566) (padding attack on SSL3)

  - add ECC TLS extensions to DTLS (#1119800)

  - fix CVE-2014-3505 - doublefree in DTLS packet processing

  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS

  - fix CVE-2014-3507 - avoid memory leak in DTLS

  - fix CVE-2014-3508 - fix OID handling to avoid     information leak

  - fix CVE-2014-3509 - fix race condition when parsing     server hello

  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling     in DTLS

  - fix CVE-2014-3511 - disallow protocol downgrade via     fragmentation

  - fix CVE-2014-0224 fix that broke EAP-FAST session     resumption support

  - drop EXPORT, RC2, and DES from the default cipher list     (#1057520)

  - print ephemeral key size negotiated in TLS handshake     (#1057715)

  - do not include ECC ciphersuites in SSLv2 client hello     (#1090952)

  - properly detect encryption failure in BIO (#1100819)

  - fail on hmac integrity check if the .hmac file is empty     (#1105567)

  - FIPS mode: make the limitations on DSA, DH, and RSA     keygen length enforced only if     OPENSSL_ENFORCE_MODULUS_BITS environment variable is set

  - fix CVE-2010-5298 - possible use of memory after free

  - fix CVE-2014-0195 - buffer overflow via invalid DTLS     fragment

  - fix CVE-2014-0198 - possible NULL pointer dereference

  - fix CVE-2014-0221 - DoS from invalid DTLS handshake     packet

  - fix CVE-2014-0224 - SSL/TLS MITM vulnerability

  - fix CVE-2014-3470 - client-side DoS when using anonymous     ECDH

  - add back support for secp521r1 EC curve

  - fix CVE-2014-0160 - information disclosure in TLS     heartbeat extension

  - use 2048 bit RSA key in FIPS selftests

  - add DH_compute_key_padded needed for FIPS CAVS testing

  - make 3des strength to be 128 bits instead of 168     (#1056616)

  - FIPS mode: do not generate DSA keys and DH parameters <     2048 bits

  - FIPS mode: use approved RSA keygen (allows only 2048 and     3072 bit keys)

  - FIPS mode: add DH selftest

  - FIPS mode: reseed DRBG properly on RAND_add

  - FIPS mode: add RSA encrypt/decrypt selftest

  - FIPS mode: add hard limit for 2^32 GCM block encryptions     with the same key

  - use the key length from configuration file if req
    -newkey rsa is invoked

  - fix CVE-2013-4353 - Invalid TLS handshake crash

  - fix CVE-2013-6450 - possible MiTM attack on DTLS1

  - fix CVE-2013-6449 - crash when version in SSL structure     is incorrect

  - add back some no-op symbols that were inadvertently     dropped

Multiple moderate issues fixed.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
73669	Fortinet OpenSSL Information Disclosure (Heartbleed)	Nessus	Misc.	2014/4/11	2023/4/25	high
73762	BlackBerry Enterprise Service Information Disclosure (KB35882) (Heartbleed)	Nessus	Windows	2014/4/29	2023/4/25	high
73833	McAfee ePolicy Orchestrator OpenSSL Information Disclosure (SB10071) (Heartbleed)	Nessus	Misc.	2014/5/2	2023/4/25	high
73834	McAfee Firewall Enterprise OpenSSL Information Disclosure (SB10071) (Heartbleed)	Nessus	Firewalls	2014/5/2	2023/4/25	high
73836	McAfee Web Gateway OpenSSL Information Disclosure (SB10071) (Heartbleed)	Nessus	Misc.	2014/5/2	2023/4/25	high
73851	VMSA-2014-0004 : VMware product updates address OpenSSL security vulnerabilities	Nessus	VMware ESX Local Security Checks	2014/5/3	2022/5/5	high
74037	Blue Coat ProxyAV 3.5.1.1 - 3.5.1.6 Heartbeat Information Disclosure (Heartbleed)	Nessus	CGI abuses	2014/5/16	2023/4/25	high
74104	IBM General Parallel File System 3.5 < 3.5.0.17 Multiple OpenSSL Vulnerabilities (Heartbleed)	Nessus	Windows	2014/5/20	2023/4/25	high
74481	Mandriva Linux Security Advisory : tor (MDVSA-2014:123)	Nessus	Mandriva Local Security Checks	2014/6/12	2022/5/5	high
75331	openSUSE Security Update : openssl (openSUSE-SU-2014:0560-1) (Heartbleed)	Nessus	SuSE Local Security Checks	2014/6/13	2022/5/5	high
75376	openSUSE Security Update : tor (openSUSE-SU-2014:0719-1) (Heartbleed)	Nessus	SuSE Local Security Checks	2014/6/13	2022/5/5	high
76490	Ipswitch IMail Server 11.x / 12.x < 12.4.1.15 Multiple Vulnerabilities (Heartbleed)	Nessus	Misc.	2014/7/14	2023/4/25	high
76575	Triangle MicroWorks SCADA Data Gateway < 3.3.729 Heartbeat Information Disclosure (Heartbleed)	Nessus	SCADA	2014/7/7	2026/9/10	high
77022	HP Version Control Agent (VCA) Heartbeat Information Disclosure (Heartbleed)	Nessus	Red Hat Local Security Checks	2014/8/6	2023/4/25	high
79547	OracleVM 3.3 : openssl (OVMSA-2014-0032) (Heartbleed) (POODLE)	Nessus	OracleVM Local Security Checks	2014/11/26	2022/5/5	high
77108	Fedora 20 : openssl-1.0.1e-39.fc20 (2014-9308) (Heartbleed)	Nessus	Fedora Local Security Checks	2014/8/10	2022/5/5	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high