JVN Info.

Id
40041  
Name
JVNDB-2009-001047  
Title
GStreamer Plug-ins の QuickTime メディアファイルの処理に関する脆弱性  
Summary
GStreamer Plug-ins の gst/qtdemux/qtdemux.c 内にある gst_qtp_trak_handler 関数には、QuickTime メディアファイルの処理に不備があることによる脆弱性が存在します。  
Nvdinfo
CVE-2009-0398  
Cvssv2
9.3  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001047.html  
Published Date
2009-02-03  
Registered Date
2009-03-04  
Last Updated Date
2009-03-04  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
51959 H28_MUN_DWEB_Q4_172_16_240_seg.csv 40041 70545 CVE-2013-4434 5 Medium 172.16.240.131 tcp 22 Dropbear SSH Server < 2013.59 Multiple Vulnerabilities The remote SSH service is affected by multiple vulnerabilities. According to its self-reported banner, the version of Dropbear SSH running on this port is earlier than 2013.59. As such, it is potentially affected by multiple vulnerabilities : - A denial of service vulnerability caused by the way the "buf_decompress()" function handles compressed files. (CVE-2013-4421) - User-enumeration is possible due to a timing error when authenticating users. (CVE-2013-4434) Upgrade to the Dropbear SSH 2013.59 or later. https://matt.ucc.asn.au/dropbear/CHANGES https://secure.ucc.asn.au/hg/dropbear/rev/0bf76f54de6f https://secure.ucc.asn.au/hg/dropbear/rev/a625f9e135a4 Version source : SSH-2.0-dropbear_0.52 Installed version : 0.52 Fixed version : 2013.59
57535 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 40041 70545 CVE-2013-4434 5 Medium 172.16.240.131 tcp 22 Dropbear SSH Server < 2013.59 Multiple Vulnerabilities The remote SSH service is affected by multiple vulnerabilities. According to its self-reported banner, the version of Dropbear SSH running on this port is earlier than 2013.59. As such, it is potentially affected by multiple vulnerabilities : - A denial of service vulnerability caused by the way the "buf_decompress()" function handles compressed files. (CVE-2013-4421) - User-enumeration is possible due to a timing error when authenticating users. (CVE-2013-4434) Upgrade to the Dropbear SSH 2013.59 or later. https://matt.ucc.asn.au/dropbear/CHANGES https://secure.ucc.asn.au/hg/dropbear/rev/0bf76f54de6f https://secure.ucc.asn.au/hg/dropbear/rev/a625f9e135a4 Version source : SSH-2.0-dropbear_0.52 Installed version : 0.52 Fixed version : 2013.59