The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components :

  - Apache Geronimo
  - Apache Tomcat
  - Apache Xerces2
  - cURL/libcURL
  - ISC BIND
  - Libxml2
  - Linux kernel
  - Linux kernel 64-bit
  - Linux kernel Common Internet File System
  - Linux kernel eCryptfs
  - NTP
  - Python
  - Java Runtime Environment (JRE)
  - Java SE Development Kit (JDK)
  - Java SE Abstract Window Toolkit (AWT)
  - Java SE Plugin
  - Java SE Provider
  - Java SE Swing
  - Java SE Web Start

The remote host is running a version of Tomcat server less than 6.0.15.  This version of Tomcat is vulnerable to a flaw in the way that it parses WEBDAV 'lock' requests.  Specifically, if the lock request references an external file, Tomcat will retrieve the file.  This could lead to information disclosure of potentially confidential data.  An attacker exploiting this flaw would need to have the ability to authenticate to the Tomcat server. 

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.4.  Mac OS X 10.5.4 contains security fixes for a number of programs.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
89117	VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2009-0016) (remote check)	Nessus	Misc.	2016/3/3	2021/1/6	critical
4245	Apache Tomcat < 6.0.15 WEBDAV Lock Request Information Disclosure (deprecated)	Nessus Network Monitor	Web Servers	2007/10/15	2019/3/6	medium
4564	Mac OS X < 10.5.4 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2004/8/18	2019/3/6	critical

検出

プラグインの検索

critical

medium

critical