Linuxのsudo権限昇格の脆弱性(直接チェック)

high Nessus プラグイン ID 146312

バージョン 1.226

Jul 28, 2025, 4:47 PM

  • Logic Changes (RSA SSH certificates can use SHA2 signatures when needed)

Plugin Feed: 202507281647

バージョン 1.225

Jul 15, 2025, 2:39 AM

  • Logic Changes

Plugin Feed: 202507150239

バージョン 1.224

Jul 10, 2025, 5:41 PM

  • Logic Changes (Windows CA support)

Plugin Feed: 202507101741

バージョン 1.223

Jun 27, 2025, 8:01 PM

  • Logic Changes

Plugin Feed: 202506272001

バージョン 1.222

Jun 23, 2025, 9:47 PM

  • Logic Changes

Plugin Feed: 202506232147

バージョン 1.221

Jun 16, 2025, 4:11 PM

  • Logic Changes (Validate X509 certificates against CA's CRL in preference to OCSP.)

Plugin Feed: 202506161611

バージョン 1.220

May 28, 2025, 9:47 AM

  • Logic Changes (Streamline SSH compatibility code)

Plugin Feed: 202505280947

バージョン 1.219

Apr 28, 2025, 4:40 PM

  • Logic Changes (Handling absence of SSH privilege escalation uniformly across products)

Plugin Feed: 202504281640

バージョン 1.218

Apr 1, 2025, 12:23 AM

  • Logic Changes (Handle Cisco devices that echo command and prompt before command results.)

Plugin Feed: 202504010023

バージョン 1.217

Mar 20, 2025, 7:47 AM

  • Detection (Handle DISA /etc/profile.d/ssh_confirm.sh consent prompt.)

Plugin Feed: 202503200747

バージョン 1.215

Mar 6, 2025, 7:23 AM

  • Detection (Handle long MOTD with pagination on Nokia devices.)

Plugin Feed: 202503060723

バージョン 1.214

Mar 3, 2025, 5:54 PM

  • Logic Changes (improve detection for some devices)

Plugin Feed: 202503031754

バージョン 1.212

Feb 12, 2025, 3:29 PM

  • Logic Changes

Plugin Feed: 202502121529

バージョン 1.211

Feb 12, 2025, 1:58 AM

  • Logic Changes

Plugin Feed: 202502120158

バージョン 1.210

Feb 10, 2025, 4:00 PM

  • Logic Changes

Plugin Feed: 202502101600

バージョン 1.208

Jan 21, 2025, 6:17 PM

  • Detection (Add SSH local checks support for Union Tech UOS)
  • Logic Changes (Tighten recognition of need to escalate.)

Plugin Feed: 202501211817

バージョン 1.204

Jan 13, 2025, 10:27 PM

  • New

Plugin Feed: 202501132227

バージョン 1.203

Jan 13, 2025, 7:38 PM

  • Logic Changes (Add display fix to structured reporting.)

Plugin Feed: 202501131938

バージョン 1.199

Dec 30, 2024, 4:30 PM

  • Logic Changes (Catch errors when rehoming find commands under sudo escalation. Ensure escalation user home with tilde.)

Plugin Feed: 202412301630

バージョン 1.198

Dec 24, 2024, 11:44 AM

  • New

Plugin Feed: 202412241144

バージョン 1.197

Dec 18, 2024, 9:32 PM

  • Detection (Set a prompt of our own in 'nix shells to handle misconfigured scan user prompts)

Plugin Feed: 202412182132

バージョン 1.196

Dec 18, 2024, 7:05 AM

  • Detection (Fixed SSH authentication using the "none" method)

Plugin Feed: 202412180705

バージョン 1.195

Dec 6, 2024, 8:13 PM

  • Detection (Better debugging related to local checks evaluations)

Plugin Feed: 202412062013

バージョン 1.194

Dec 3, 2024, 3:59 PM

  • Detection (Support Azure Linux for generated package plugins.)

Plugin Feed: 202412031559

バージョン 1.193

Nov 22, 2024, 6:54 PM

  • Logic Changes (Fixed installation reporting)

Plugin Feed: 202411221854

バージョン 1.192

Nov 20, 2024, 5:30 PM

  • Detection (Reports vulnerable dpkg based packages as structured data.)

Plugin Feed: 202411201730

バージョン 1.191

Nov 12, 2024, 8:29 PM

  • Logic Changes (Adding installs report)

Plugin Feed: 202411122029

バージョン 1.189

Nov 6, 2024, 2:41 PM

  • Detection (adding support for Forescout CounterACT)

Plugin Feed: 202411061441

バージョン 1.188

Oct 29, 2024, 8:44 PM

  • Logic Changes (Extend structured reporting to vcf_extras)

Plugin Feed: 202410292044

バージョン 1.184

Oct 10, 2024, 11:57 PM

  • New

Plugin Feed: 202410102357

バージョン 1.183

Oct 10, 2024, 4:58 AM

  • Detection (Change dir to $HOME before find commands to handle weird find behavior with escalation.)

Plugin Feed: 202410100458

バージョン 1.182

Oct 9, 2024, 5:56 PM

  • Logic Changes (Corrects vulnerability-finding structured data tags to include the port.)

Plugin Feed: 202410091756

バージョン 1.178

Oct 3, 2024, 6:29 PM

  • Detection (Adding hardware constraint support to VCF and UCF)

Plugin Feed: 202410031829

バージョン 1.177

Oct 2, 2024, 4:10 PM

  • Logic Changes (Adds structured data reports to a subset of manual plugins.)

Plugin Feed: 202410021610

バージョン 1.175

Sep 11, 2024, 5:35 PM

  • New (Detects QUIC servers running on the target. Implement a NASL QUIC library to support detection of HTTP/3 and possibly more)

Plugin Feed: 202409111735

バージョン 1.174

Sep 3, 2024, 11:47 PM

  • Logic Changes (additional data collection for runtime scanning. fixed logic bug causing potential false negatives. fixed logic bug causing potential false positives. fixed logic bug with potential to break cyberark logins)

Plugin Feed: 202409032347

バージョン 1.172

Sep 3, 2024, 5:26 PM

  • Detection (Support for Aruba CPPM SSH based local checks)

Plugin Feed: 202409031726

バージョン 1.170

Aug 14, 2024, 8:33 PM

  • Logic Changes (Endianness fix in Kerberos authentication for SCAP scanning)

Plugin Feed: 202408142033

バージョン 1.169

Aug 8, 2024, 4:43 PM

  • Logic Changes (Support OpenSSH private key formats for authentication.)

Plugin Feed: 202408081643

バージョン 1.166

Jul 24, 2024, 6:31 PM

  • Logic Changes (Modernize SSH usage to optimize behavior on Nessus Agents.. adding AI family)

Plugin Feed: 202407241831

バージョン 1.164

Jul 17, 2024, 11:02 PM

  • Logic Changes

Plugin Feed: 202407172302

バージョン 1.163

Jul 6, 2024, 12:22 AM

  • Detection (Changes to support Juniper Session Smart Router)

Plugin Feed: 202407060022

バージョン 1.162

Jul 5, 2024, 9:04 PM

  • Detection (Adding detection of Juniper SSR devices)

Plugin Feed: 202407052104

バージョン 1.161

Jun 27, 2024, 9:09 PM

  • New (Deploy nessus_utils binaries on the Nessus Agent)

Plugin Feed: 202406272109

バージョン 1.159

Jun 21, 2024, 6:31 PM

  • Detection (updated detection for SonicOS devices)

Plugin Feed: 202406211831

バージョン 1.158

Jun 21, 2024, 2:16 PM

  • Logic Changes

Plugin Feed: 202406211416

バージョン 1.155

May 20, 2024, 10:13 AM

  • Logic Changes

Plugin Feed: 202405201013

バージョン 1.151

Mar 27, 2024, 7:16 PM

  • Detection (Debian kernel vulns will now be evaluated against the running kernel version instead of the highest installed version)

Plugin Feed: 202403271916

バージョン 1.150

Mar 19, 2024, 6:40 PM

  • Logic Changes (Improving logging to reduce disk space usage)

Plugin Feed: 202403191840

バージョン 1.147

Mar 5, 2024, 1:15 AM

  • Logic Changes (Report structured data for RPM version checks.)

Plugin Feed: 202403050115

バージョン 1.146

Mar 4, 2024, 5:08 PM

  • Logic Changes (Add support functions for unpatched debian/ubuntu vuln checks.)

Plugin Feed: 202403041708

バージョン 1.145

Feb 27, 2024, 8:49 PM

  • Logic Changes (Report structured data for DPKG version checks.)

Plugin Feed: 202402272049

バージョン 1.141

Feb 9, 2024, 11:22 AM

  • New

Plugin Feed: 202402091122

バージョン 1.140

Jan 16, 2024, 8:55 PM

  • Logic Changes (Improving debug logging)

Plugin Feed: 202401162055

バージョン 1.138

Jan 16, 2024, 5:39 PM

  • Detection (Add carrier grade NAT IPs to the IPv4 private address ranges.. Support privacy mode DCOM over Kerberos)
  • Logic Changes (Improving debug logging)

Plugin Feed: 202401161739

バージョン 1.134

Dec 6, 2023, 12:08 AM

  • Logic Changes (Fixes bug in special case shell handling logic.)

Plugin Feed: 202312060008

バージョン 1.133

Dec 5, 2023, 9:49 PM

  • Logic Changes (Fixes bug in special case shell handling logic.)

Plugin Feed: 202312052149

バージョン 1.132

Nov 28, 2023, 11:17 AM

  • Detection (Fixing detection of Cisco Firepower devices)

Plugin Feed: 202311281117

バージョン 1.131

Nov 27, 2023, 6:11 PM

  • Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.)

Plugin Feed: 202311271811

バージョン 1.130

Nov 14, 2023, 4:21 PM

  • Detection (Support SHA2 based encryption for Kerberos)

Plugin Feed: 202311141621

バージョン 1.130

Nov 27, 2023, 4:16 PM

  • Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.)

Plugin Feed: 202311271616

バージョン 1.128

Oct 30, 2023, 1:08 PM

  • Detection (Fixed detection of JUNOS)

Plugin Feed: 202310301308

バージョン 1.127

Oct 25, 2023, 5:17 PM

  • Detection (Handle SSH exec hang and pagination ctrl codes for PanOS)

Plugin Feed: 202310251717

バージョン 1.121

Oct 4, 2023, 11:07 PM

  • Detection (Fixed Cisco Firepower detection)

Plugin Feed: 202310042307

バージョン 1.120

Sep 26, 2023, 8:16 PM

  • Logic Changes

Plugin Feed: 202309262016

バージョン 1.116

Jul 24, 2023, 7:10 PM

  • Logic Changes (added debugging)

Plugin Feed: 202307241910

バージョン 1.114

Jul 17, 2023, 5:15 PM

  • Logic Changes (Make torture_cgi library PCP clean and consolidate utf16_to_ascii(). Permit CIDR entries in target priority list)

Plugin Feed: 202307171715

バージョン 1.112

Jul 10, 2023, 7:11 PM

  • Logic Changes (Restrict ClientHello ciphersuites by encapsulation)

Plugin Feed: 202307101911

バージョン 1.111

Jul 5, 2023, 9:03 PM

  • Logic Changes (added ingestion and ability of target priority lists for SSH credentials)

Plugin Feed: 202307052103

バージョン 1.110

Jun 20, 2023, 9:07 PM

  • Logic Changes (Temporarily limit debug logging)

Plugin Feed: 202306202107

バージョン 1.105

Jun 1, 2023, 5:27 AM

  • Logic Changes (Better logging)

Plugin Feed: 202306010527

バージョン 1.104

May 18, 2023, 1:08 AM

  • Detection (Port Alcatel-Lucent OmniSwitch support from ssh_get_info.nasl to ssh_lib as a rate limited device.)

Plugin Feed: 202305180108

バージョン 1.102

May 16, 2023, 7:02 PM

  • Detection (Authenticate WMI/DCOM using Kerberos credentials.)

Plugin Feed: 202305161902

バージョン 1.100

May 1, 2023, 9:07 PM

  • Detection (Make and use compatibility wrapper for running commands on scanner localhost to handle deprecation of pread().)

Plugin Feed: 202305012107

バージョン 1.97

Apr 6, 2023, 6:58 PM

  • Detection (Add Kerberos debug logging)

Plugin Feed: 202304061858

バージョン 1.95

Mar 8, 2023, 1:05 AM

  • Logic Changes

Plugin Feed: 202303080105

* Changelogs are generally available for changes made after Nov 1, 2022