JVN Info.

Id
24401  
Name
JVNDB-2013-005976  
Title
cantata における絶対パストラバーサルの脆弱性  
Summary
cantata には、絶対パストラバーサルの脆弱性が存在します。  
Nvdinfo
CVE-2013-7300  
Cvssv2
5  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005976.html  
Published Date
2013-12-24  
Registered Date
2014-02-04  
Last Updated Date
2014-02-04  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
56649 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 24401 86255 CVE-2015-2342 10 Critical 172.16.240.100 tcp 443 VMware vCenter Multiple Vulnerabilities (VMSA-2015-0007) The remote host has a virtualization management application installed that is affected by multiple vulnerabilities. The VMware vCenter Server installed on the remote host is affected by the following vulnerabilities : - A flaw exists in the vpxd service due to improper sanitization of long heartbeat messages. An unauthenticated, remote attacker can exploit this to cause a denial of service. (CVE-2015-1047) - A flaw exists due to an insecurely configured and remotely accessible JMX RMI service. An unauthenticated, remote attacker can exploit this, via an MLet file, to execute arbitrary code on the vCenter server with the same privileges as the web server. (CVE-2015-2342) Upgrade to VMware vCenter Server 6.0.0b (6.0.0 build-2776510), 5.5u3 (5.5.0 build-3000241), 5.1u3b (5.1.0 build-3070521), or 5.0u3e (5.0.0 build-3073234) or later. https://www.vmware.com/security/advisories/VMSA-2015-0007.html http://www.zerodayinitiative.com/advisories/ZDI-15-455/ Installed version : 5.5.0 build-1945274 Fixed version : 5.5.0 build-3000241