JVN Info.

Id
46190  
Name
JVNDB-2008-001500  
Title
Microsoft SQL Server のメモリ再配置の際メモリページを初期化しない脆弱性  
Summary
Microsoft SQL Server には、メモリの再配置する際にメモリページを初期化しない脆弱性が存在します。  
Nvdinfo
CVE-2008-0085  
Cvssv2
5  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001500.html  
Published Date
2008-07-08  
Registered Date
2008-07-23  
Last Updated Date
2011-03-04  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
51152 H28_MUN_DWEB_Q4_172_16_240_seg.csv 46190 62565 CVE-2012-4930 4.3 Medium 172.16.240.115 tcp 443 Transport Layer Security (TLS) Protocol CRIME Vulnerability The remote service has a configuration that may make it vulnerable to the CRIME attack. The remote service has one of two configurations that are known to be required for the CRIME attack : - SSL / TLS compression is enabled. - TLS advertises the SPDY protocol earlier than version 4. Note that Nessus did not attempt to launch the CRIME attack against the remote service. Disable compression and / or the SPDY service. http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091 https://discussions.nessus.org/thread/5546 http://www.nessus.org/u?8ec18eb5 https://issues.apache.org/bugzilla/show_bug.cgi?id=53219 The following configuration indicates that the remote service may be vulnerable to the CRIME attack : - SSL / TLS compression is enabled.
51953 H28_MUN_DWEB_Q4_172_16_240_seg.csv 46190 62565 CVE-2012-4930 4.3 Medium 172.16.240.131 tcp 443 Transport Layer Security (TLS) Protocol CRIME Vulnerability The remote service has a configuration that may make it vulnerable to the CRIME attack. The remote service has one of two configurations that are known to be required for the CRIME attack : - SSL / TLS compression is enabled. - TLS advertises the SPDY protocol earlier than version 4. Note that Nessus did not attempt to launch the CRIME attack against the remote service. Disable compression and / or the SPDY service. http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091 https://discussions.nessus.org/thread/5546 http://www.nessus.org/u?8ec18eb5 https://issues.apache.org/bugzilla/show_bug.cgi?id=53219 The following configuration indicates that the remote service may be vulnerable to the CRIME attack : - SSL / TLS compression is enabled.
56732 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 46190 62565 CVE-2012-4930 4.3 Medium 172.16.240.115 tcp 443 Transport Layer Security (TLS) Protocol CRIME Vulnerability The remote service has a configuration that may make it vulnerable to the CRIME attack. The remote service has one of two configurations that are known to be required for the CRIME attack : - SSL / TLS compression is enabled. - TLS advertises the SPDY protocol earlier than version 4. Note that Nessus did not attempt to launch the CRIME attack against the remote service. Disable compression and / or the SPDY service. http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091 https://discussions.nessus.org/thread/5546 http://www.nessus.org/u?8ec18eb5 https://issues.apache.org/bugzilla/show_bug.cgi?id=53219 The following configuration indicates that the remote service may be vulnerable to the CRIME attack : - SSL / TLS compression is enabled.
57529 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 46190 62565 CVE-2012-4930 4.3 Medium 172.16.240.131 tcp 443 Transport Layer Security (TLS) Protocol CRIME Vulnerability The remote service has a configuration that may make it vulnerable to the CRIME attack. The remote service has one of two configurations that are known to be required for the CRIME attack : - SSL / TLS compression is enabled. - TLS advertises the SPDY protocol earlier than version 4. Note that Nessus did not attempt to launch the CRIME attack against the remote service. Disable compression and / or the SPDY service. http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091 https://discussions.nessus.org/thread/5546 http://www.nessus.org/u?8ec18eb5 https://issues.apache.org/bugzilla/show_bug.cgi?id=53219 The following configuration indicates that the remote service may be vulnerable to the CRIME attack : - SSL / TLS compression is enabled.