JVN Info.

Id
11587  
Name
JVNDB-2015-006907  
Title
組込み機器に固有でない X.509 証明書および SSH ホスト鍵を使用している問題  
Summary
多くの組込み機器が、固有でない X.509 証明書と SSH ホスト鍵を使用しているため、なりすましや中間者 (man-in-the-middle) 攻撃、通信内容の解読などの攻撃を受ける可能性があります。  
Nvdinfo
 
Cvssv2
5  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006907.html  
Published Date
2015-11-25  
Registered Date
2016-02-29  
Last Updated Date
2016-02-29  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
51493 H28_MUN_DWEB_Q4_172_16_240_seg.csv 11587 89674 CVE-2010-0007 10 Critical 172.16.240.115 tcp 443 VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0003) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Apache Tomcat - Apache Tomcat Manager - cURL - Java Runtime Environment (JRE) - Kernel - Microsoft SQL Express - OpenSSL - pam_krb5 Apply the appropriate patch according to the vendor advisory that pertains to ESX version 4.0 / 4.1 or ESXi version 4.0 / 4.1. https://www.vmware.com/security/advisories/VMSA-2011-0003 http://lists.vmware.com/pipermail/security-announce/2011/000140.html Version : ESX 4.0 Installed build : 208167 Fixed build : 360236
57074 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 11587 89674 CVE-2010-0007 10 Critical 172.16.240.115 tcp 443 VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0003) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Apache Tomcat - Apache Tomcat Manager - cURL - Java Runtime Environment (JRE) - Kernel - Microsoft SQL Express - OpenSSL - pam_krb5 Apply the appropriate patch according to the vendor advisory that pertains to ESX version 4.0 / 4.1 or ESXi version 4.0 / 4.1. https://www.vmware.com/security/advisories/VMSA-2011-0003 http://lists.vmware.com/pipermail/security-announce/2011/000140.html Version : ESX 4.0 Installed build : 208167 Fixed build : 360236