JVN Info.

Id
15560  
Name
JVNDB-2014-004435  
Title
PHP の PEAR の REST.php 内の PEAR_REST クラスにおける任意のファイルに書き込まれる脆弱性  
Summary
PHP の PEAR の REST.php 内の PEAR_REST クラスには、retrieveCacheFirst および useLocalCache 関数に関する処理に不備があるため、任意のファイルに書き込まれる脆弱性が存在します。  
Nvdinfo
CVE-2014-5459  
Cvssv2
3.6  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004435.html  
Published Date
2014-08-25  
Registered Date
2014-09-30  
Last Updated Date
2015-04-08  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
51900 H28_MUN_DWEB_Q4_172_16_240_seg.csv 15560 89744 CVE-2010-4297 7.2 High 172.16.240.115 tcp 443 VMware ESX / ESXi Tools Update Privilege Escalation (VMSA-2010-0018) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by an unspecified flaw in the Tools update functionality due to improper validation of user-supplied input. A local attacker with host operating system access can exploit this flaw to gain root privileges on the guess operating system. Apply the appropriate patch as referenced in the vendor advisory that pertains to ESX version 3.5 / 4.0 / 4.1 or ESXi version 3.5 / 4.0 / 4.1. http://lists.vmware.com/pipermail/security-announce/2010/000112.html Version : ESX 4.0 Installed build : 208167 Fixed build : 294855
57481 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 15560 89744 CVE-2010-4297 7.2 High 172.16.240.115 tcp 443 VMware ESX / ESXi Tools Update Privilege Escalation (VMSA-2010-0018) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by an unspecified flaw in the Tools update functionality due to improper validation of user-supplied input. A local attacker with host operating system access can exploit this flaw to gain root privileges on the guess operating system. Apply the appropriate patch as referenced in the vendor advisory that pertains to ESX version 3.5 / 4.0 / 4.1 or ESXi version 3.5 / 4.0 / 4.1. http://lists.vmware.com/pipermail/security-announce/2010/000112.html Version : ESX 4.0 Installed build : 208167 Fixed build : 294855