The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0428 advisory.

    - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
    - fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

A boundary error was found in the gnutls_session_get_data() function.
A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutls_session_get_data() before checking the real size of the session data provided by the server.
(CVE-2011-4128)

Important security update fixing two security issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

3 vulnerabilities were discovered for the gnutls packages in openSUSE version 12.1.

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-446:02 advisory.

    GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable     transport layer. Currently the GnuTLS library implements the proposed standards by the IETF's TLS working     group.
    Security issues fixed with this release:
     CVE-2011-4128     Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before     2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows     remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
     CVE-2012-1569     The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before     3.0.16 and other products, does not properly handle certain large length values, which allows remote     attackers to cause a denial of service (heap memory corruption and application crash) or possibly have     unspecified other impact via a crafted ASN.1 structure.
     CVE-2012-1573     gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data     encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory     corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher     structure.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0428 advisory.

  - gnutls: buffer overflow in gnutls_session_get_data() (GNUTLS-SA-2011-2) (CVE-2011-4128)

  - libtasn1: DER decoding buffer overflow (GNUTLS-SA-2012-3, MU-201202-02) (CVE-2012-1569)

  - gnutls: TLS record handling issue (GNUTLS-SA-2012-2, MU-201202-01) (CVE-2012-1573)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201206-18 (GnuTLS: Multiple vulnerabilities)

    Multiple vulnerabilities have been found in GnuTLS:
      An error in libgnutls does not properly sanitize '\\0' characters from         certificate fields (CVE-2009-2730).
      An error in the TLS and SSL protocols mistreats renegotiation         handshakes (CVE-2009-3555).
      A boundary error in the 'gnutls_session_get_data()' function in         gnutls_session.c could cause a buffer overflow (CVE-2011-4128).
      An error in the '_gnutls_ciphertext2compressed()' function in         gnutls_cipher.c could cause memory corruption (CVE-2012-1573).
  Impact :

    A remote attacker could perform man-in-the-middle attacks to spoof       arbitrary SSL servers or cause a Denial of Service condition in       applications linked against GnuTLS.
  Workaround :

    There is no known workaround at this time.

a. vCenter and ESX update to JRE 1.6.0 Update 31

   The Oracle (Sun) JRE is updated to version 1.6.0_31, which    addresses multiple security issues. Oracle has documented the    CVE identifiers that are addressed by this update in the Oracle    Java SE Critical Patch Update Advisory of February 2012.

b. vCenter Update Manager update to JRE 1.5.0 Update 36

   The Oracle (Sun) JRE is updated to 1.5.0_36 to address multiple    security issues.  Oracle has documented the CVE identifiers that    are addressed in JRE 1.5.0_36 in the Oracle Java SE Critical    Patch Update Advisory for June 2012.

c. Update to ESX/ESXi userworld OpenSSL library

   The ESX/ESXi userworld OpenSSL library is updated from version    0.9.8p to version 0.9.8t to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-4180, CVE-2010-4252,    CVE-2011-0014, CVE-2011-4108, CVE-2011-4109, CVE-2011-4576,    CVE-2011-4577, CVE-2011-4619, and CVE-2012-0050 to these issues.

d. Update to ESX service console OpenSSL RPM

   The service console OpenSSL RPM is updated to version    0.9.8e-22.el5_8.3 to resolve a security issue.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2012-2110 to this issue.

e. Update to ESX service console kernel

   The ESX service console kernel is updated to resolve multiple    security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2011-1833, CVE-2011-2484,    CVE-2011-2496, CVE-2011-3188, CVE-2011-3209, CVE-2011-3363,    CVE-2011-4110, CVE-2011-1020, CVE-2011-4132, CVE-2011-4324,    CVE-2011-4325, CVE-2012-0207, CVE-2011-2699, and CVE-2012-1583    to these issues.

f. Update to ESX service console Perl RPM

   The ESX service console Perl RPM is updated to    perl-5.8.8.32.1.8999.vmw to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-2761, CVE-2010-4410, and    CVE-2011-3597 to these issues.

g. Update to ESX service console libxml2 RPMs

   The ESX service console libmxl2 RPMs are updated to    libxml2-2.6.26-2.1.15.el5_8.2 and    libxml2-python-2.6.26-2.1.15.el5_8.2 to resolve a security    issue.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2012-0841 to this issue.

h. Update to ESX service console glibc RPM

   The ESX service console glibc RPM is updated to version    glibc-2.5-81.el5_8.1 to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the names CVE-2009-5029, CVE-2009-5064,    CVE-2010-0830, CVE-2011-1089, CVE-2011-4609, and CVE-2012-0864    to these issue.

i. Update to ESX service console GnuTLS RPM

   The ESX service console GnuTLS RPM is updated to version    1.4.1-7.el5_8.2 to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2011-4128, CVE-2012-1569, and    CVE-2012-1573 to these issues.

j. Update to ESX service console popt, rpm, rpm-libs,    and rpm-python RPMS

   The ESX service console popt, rpm, rpm-libs, and rpm-python RPMS    are updated to the following versions to resolve multiple    security issues :
      - popt-1.10.2.3-28.el5_8
      - rpm-4.4.2.3-28.el5_8
      - rpm-libs-4.4.2.3-28.el5_8
      - rpm-python-4.4.2.3-28.el5_8

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2012-0060, CVE-2012-0061, and    CVE-2012-0815 to these issues.

k. Vulnerability in third-party Apache Struts component

   The version of Apache Struts in vCenter Operations has been    updated to 2.3.4 which addresses an arbitrary file overwrite    vulnerability. This vulnerability allows an attacker to create    a denial of service by overwriting arbitrary files without    authentication. The attacker would need to be on the same network    as the system where vCOps is installed.

   The Common Vulnerabilities and Exposures project (cve.mitre.org) has    assigned the name CVE-2012-0393 to this issue.

   Note: Apache struts 2.3.4 addresses the following issues as well :
   CVE-2011-5057, CVE-2012-0391, CVE-2012-0392, CVE-2012-0394. It    was found that these do not affect vCOps.

   VMware would like to thank Alexander Minozhenko from ERPScan for    reporting this issue to us.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0429 advisory.

    - fix CVE-2012-1573 - security issue in packet parsing (#805432)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Matthew Hall discovered that GNUTLS does not properly handle truncated GenericBlockCipher structures nested inside TLS records, leading to crashes in applications using the GNUTLS library.

The remote Solaris system is missing necessary patches to address security updates :

  - gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17     and 3.x before 3.0.15 does not properly handle data     encrypted with a block cipher, which allows remote     attackers to cause a denial of service (heap memory     corruption and application crash) via a crafted record,     as demonstrated by a crafted GenericBlockCipher     structure. (CVE-2012-1573)

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party libraries :

  - Apache Struts
  - glibc
  - GnuTLS
  - JRE
  - kernel
  - libxml2
  - OpenSSL
  - Perl
  - popt and rpm

ID	名前	製品	ファミリー	公開日	更新日	深刻度
68503	Oracle Linux 5 : gnutls (ELSA-2012-0428)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2025/4/29	critical
69666	Amazon Linux AMI : gnutls (ALAS-2012-59)	Nessus	Amazon Linux Local Security Checks	2013/9/4	2018/4/18	medium
58668	Fedora 15 : gnutls-2.10.5-3.fc15 (2012-4569)	Nessus	Fedora Local Security Checks	2012/4/11	2021/1/11	medium
74627	openSUSE Security Update : gnutls (openSUSE-SU-2012:0620-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	high
284218	MiracleLinux 3 : gnutls-1.4.1-7.2.0.1.AXS3 (AXSA:2012-446:02)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical
58509	RHEL 5 : gnutls (RHSA-2012:0428)	Nessus	Red Hat Local Security Checks	2012/3/28	2024/4/24	critical
59671	GLSA-201206-18 : GnuTLS: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2012/6/25	2021/1/6	high
61747	VMSA-2012-0013 : VMware vSphere and vCOps updates to third-party libraries	Nessus	VMware ESX Local Security Checks	2012/8/31	2021/1/6	critical
68504	Oracle Linux 6 : gnutls (ELSA-2012-0429)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2025/4/29	critical
58460	Debian DSA-2441-1 : gnutls26 - missing bounds check	Nessus	Debian Local Security Checks	2012/3/26	2021/1/11	medium
80629	Oracle Solaris Third-Party Patch Update : gnutls (cve_2012_1573_denial_of)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	medium
89038	VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2012-0013) (remote check)	Nessus	Misc.	2016/2/29	2021/1/6	high

検出

プラグインの検索

critical

medium

medium

high

critical

critical

high

critical

critical

medium

medium

high