JVN Info.

Id
11856  
Name
JVNDB-2015-007176  
Title
PHP の ext/libxml/libxml.c における XML 外部エンティティおよび XML エンティティ拡張攻撃を実行される脆弱性  
Summary
PHP の ext/libxml/libxml.c は、PHP-FPM が使用されている場合、他のスレッドの libxml_disable_entity_loader の変更から各スレッドを隔離しないため、XML 外部エンティティ (XXE) および XML エンティティ拡張 (XEE) 攻撃を実行される脆弱性が存在します。  
Nvdinfo
CVE-2015-8866  
Cvssv2
6.8  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007176.html  
Published Date
2015-02-19  
Registered Date
2016-05-25  
Last Updated Date
2016-05-25  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
51878 H28_MUN_DWEB_Q4_172_16_240_seg.csv 11856 89740 CVE-2010-0290 10 Critical 172.16.240.115 tcp 443 VMware ESX / ESXi Third-Party Libraries and Components (VMSA-2010-0009) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries : - libpng - VMnc Codec - vmrun - VMware Remote Console (VMrc) - VMware Tools - vmware-authd Apply the appropriate patch according to the vendor advisory that pertains to ESX version 3.5 / 4.0 or ESXi version 3.5 / 4.0. https://www.vmware.com/security/advisories/VMSA-2010-0009 http://lists.vmware.com/pipermail/security-announce/2010/000099.html Version : ESX 4.0 Installed build : 208167 Fixed build : 256968
57459 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 11856 89740 CVE-2010-0290 10 Critical 172.16.240.115 tcp 443 VMware ESX / ESXi Third-Party Libraries and Components (VMSA-2010-0009) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries : - libpng - VMnc Codec - vmrun - VMware Remote Console (VMrc) - VMware Tools - vmware-authd Apply the appropriate patch according to the vendor advisory that pertains to ESX version 3.5 / 4.0 or ESXi version 3.5 / 4.0. https://www.vmware.com/security/advisories/VMSA-2010-0009 http://lists.vmware.com/pipermail/security-announce/2010/000099.html Version : ESX 4.0 Installed build : 208167 Fixed build : 256968