JVN Info.

Id
13684  
Name
JVNDB-2014-002559  
Title
Jinja2 の bccache.FileSystemBytecodeCache のデフォルト設定における権限を取得される脆弱性  
Summary
Jinja2 の bccache.FileSystemBytecodeCache のデフォルト設定には、適切に一時ディレクトリを作成しないため、権限を取得される脆弱性が存在します。  
Nvdinfo
CVE-2014-1402  
Cvssv2
4.4  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002559.html  
Published Date
2014-01-10  
Registered Date
2014-05-21  
Last Updated Date
2014-12-25  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
51579 H28_MUN_DWEB_Q4_172_16_240_seg.csv 13684 89675 CVE-2010-2199 7.2 High 172.16.240.115 tcp 443 VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0004) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including arbitrary code execution vulnerabilities, in several third-party components and libraries : - bind - pam - popt - rpm - rpm-libs - rpm-python - Service Location Protocol daemon (SLPD) Apply the appropriate patch according to the vendor advisory that pertains to ESX version 4.0 / 4.1 or ESXi version 4.0 / 4.1. https://www.vmware.com/security/advisories/VMSA-2011-0004 http://lists.vmware.com/pipermail/security-announce/2012/000159.html Version : ESX 4.0 Installed build : 208167 Fixed build : 360236
57160 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 13684 89675 CVE-2010-2199 7.2 High 172.16.240.115 tcp 443 VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0004) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including arbitrary code execution vulnerabilities, in several third-party components and libraries : - bind - pam - popt - rpm - rpm-libs - rpm-python - Service Location Protocol daemon (SLPD) Apply the appropriate patch according to the vendor advisory that pertains to ESX version 4.0 / 4.1 or ESXi version 4.0 / 4.1. https://www.vmware.com/security/advisories/VMSA-2011-0004 http://lists.vmware.com/pipermail/security-announce/2012/000159.html Version : ESX 4.0 Installed build : 208167 Fixed build : 360236