JVN Info.

Id
23433  
Name
JVNDB-2013-005008  
Title
HP LoadRunner の Virtual User Generator における任意のコードを実行される脆弱性  
Summary
HP LoadRunner の Virtual User Generator には、任意のコードを実行される脆弱性が存在します。  
Nvdinfo
CVE-2013-4838  
Cvssv2
10  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005008.html  
Published Date
2013-10-30  
Registered Date
2013-11-06  
Last Updated Date
2013-11-06  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
56648 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 23433 86255 CVE-2015-1047 10 Critical 172.16.240.100 tcp 443 VMware vCenter Multiple Vulnerabilities (VMSA-2015-0007) The remote host has a virtualization management application installed that is affected by multiple vulnerabilities. The VMware vCenter Server installed on the remote host is affected by the following vulnerabilities : - A flaw exists in the vpxd service due to improper sanitization of long heartbeat messages. An unauthenticated, remote attacker can exploit this to cause a denial of service. (CVE-2015-1047) - A flaw exists due to an insecurely configured and remotely accessible JMX RMI service. An unauthenticated, remote attacker can exploit this, via an MLet file, to execute arbitrary code on the vCenter server with the same privileges as the web server. (CVE-2015-2342) Upgrade to VMware vCenter Server 6.0.0b (6.0.0 build-2776510), 5.5u3 (5.5.0 build-3000241), 5.1u3b (5.1.0 build-3070521), or 5.0u3e (5.0.0 build-3073234) or later. https://www.vmware.com/security/advisories/VMSA-2015-0007.html http://www.zerodayinitiative.com/advisories/ZDI-15-455/ Installed version : 5.5.0 build-1945274 Fixed version : 5.5.0 build-3000241