JVN Info.

Id
10634  
Name
JVNDB-2015-005954  
Title
Cisco FireSIGHT Management Center のルール更新機能における SSL サーバになりすまされる脆弱性  
Summary
Cisco FireSIGHT Management Center (MC) のルール更新機能は、support.sourcefire.com SSL サーバの X.509 証明書を検証しないため、このサーバになりすまされ、不正なパッケージを提供され、その結果、任意のコードを実行される脆弱性が存在します。  
Nvdinfo
CVE-2015-6357  
Cvssv2
6.8  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005954.html  
Published Date
2015-11-16  
Registered Date
2015-11-19  
Last Updated Date
2015-11-19  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
51206 H28_MUN_DWEB_Q4_172_16_240_seg.csv 10634 89038 CVE-2011-4108 9.3 High 172.16.240.115 tcp 443 VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2012-0013) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party libraries : - Apache Struts - glibc - GnuTLS - JRE - kernel - libxml2 - OpenSSL - Perl - popt and rpm Apply the appropriate patch according to the vendor advisory that pertains to ESX version 3.5 / 4.0 / 4.1 or ESXi version 3.5 / 4.0 / 4.1 / 5.0. http://www.vmware.com/security/advisories/VMSA-2012-0013.html ESX version : ESX 4.0 Installed build : 208167 Fixed build : 787047
56787 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 10634 89038 CVE-2011-4108 9.3 High 172.16.240.115 tcp 443 VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2012-0013) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party libraries : - Apache Struts - glibc - GnuTLS - JRE - kernel - libxml2 - OpenSSL - Perl - popt and rpm Apply the appropriate patch according to the vendor advisory that pertains to ESX version 3.5 / 4.0 / 4.1 or ESXi version 3.5 / 4.0 / 4.1 / 5.0. http://www.vmware.com/security/advisories/VMSA-2012-0013.html ESX version : ESX 4.0 Installed build : 208167 Fixed build : 787047