The remote host is affected by the vulnerability described in GLSA-200909-03 (Apache Portable Runtime, APR Utility Library: Execution of arbitrary code)

    Matt Lewis reported multiple Integer overflows in the apr_rmm_malloc(),     apr_rmm_calloc(), and apr_rmm_realloc() functions in misc/apr_rmm.c of     APR-Util and in memory/unix/apr_pools.c of APR, both occurring when     aligning memory blocks.
  Impact :

    A remote attacker could entice a user to connect to a malicious server     with software that uses the APR or act as a malicious client to a     server that uses the APR (such as Subversion or Apache servers),     possibly resulting in the execution of arbitrary code with the     privileges of the user running the application.
  Workaround :

    There is no known workaround at this time.

This update of libapr-util1 and libapr1 fixes multiple integer overflows that could probably be used to execute arbitrary code remotely. (CVE-2009-2412)

The following bugs have been fixed : 

  - Integer overflows in libapr could potentially be     exploited to execute arbitrary code. (CVE-2009-2412)

  - Specially crafted XML documents cause apache to consume     large amounts of memory. (CVE-2009-1955)

The remote host is running a version of Mac OS X 10.6 that is older than version 10.6.2.  Mac OS X 10.6.2 contains security fixes for the following products : 

  - Adaptive Firewall

  - Apache

  - Apache Protable Runtime

  - Certificate Assistant

  - CoreMedia

  - CUPS

  - DoveCot

  - fetchmail

  - file

  - FTP Server

  - Help Viewer

  - ImageIO

  - IOKit

  - IPSec

  - Kernel

  - Launch Services

  - libsecurity

  - libxml

 Login Window

  - OpenLDAP

  - QuickDraw Manager

QuickTime

  - Screen Sharing

  - Subversion

ID	名前	製品	ファミリー	公開日	更新日	深刻度
40911	GLSA-200909-03 : Apache Portable Runtime, APR Utility Library: Execution of arbitrary code	Nessus	Gentoo Local Security Checks	2009/9/10	2021/1/6	critical
42232	openSUSE Security Update : libapr-util1 (libapr-util1-1375)	Nessus	SuSE Local Security Checks	2009/10/23	2021/1/14	critical
42236	SuSE 10 Security Update : libapr (ZYPP Patch Number 6546)	Nessus	SuSE Local Security Checks	2009/10/23	2021/1/14	critical
46217	SuSE9 Security Update : Apache 2 (YOU Patch Number 12613)	Nessus	SuSE Local Security Checks	2010/5/4	2021/1/14	critical
5227	Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2009/11/10	2019/3/6	critical
800795	Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection	2009/11/10		high

検出

プラグインの検索

critical

critical

critical

critical

critical

high