JVN Info.

Id
49656  
Name
JVNDB-2008-004966  
Title
Kure の index.php におけるディレクトリトラバーサルの脆弱性  
Summary
Kure の index.php には、magic_quotes_gpc が無効になっている際、ディレクトリトラバーサルの脆弱性が存在します。  
Nvdinfo
CVE-2008-4632  
Cvssv2
6.8  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004966.html  
Published Date
2008-10-20  
Registered Date
2012-09-25  
Last Updated Date
2012-09-25  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
51740 H28_MUN_DWEB_Q4_172_16_240_seg.csv 49656 89735 CVE-2009-2409 10 Critical 172.16.240.115 tcp 443 VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2010-0001) (remote check) The remote VMware ESX host is missing a security-related patch. The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Network Security Services (NSS) - NetScape Portable Runtime (NSPR) Apply the appropriate patch according to the vendor advisory that pertains to ESX version 4.0. https://www.vmware.com/security/advisories/VMSA-2010-0001 http://lists.vmware.com/pipermail/security-announce/2010/000083.html Version : ESX 4.0 Installed build : 208167 Fixed build : 219382
51848 H28_MUN_DWEB_Q4_172_16_240_seg.csv 49656 89740 CVE-2009-2409 10 Critical 172.16.240.115 tcp 443 VMware ESX / ESXi Third-Party Libraries and Components (VMSA-2010-0009) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries : - libpng - VMnc Codec - vmrun - VMware Remote Console (VMrc) - VMware Tools - vmware-authd Apply the appropriate patch according to the vendor advisory that pertains to ESX version 3.5 / 4.0 or ESXi version 3.5 / 4.0. https://www.vmware.com/security/advisories/VMSA-2010-0009 http://lists.vmware.com/pipermail/security-announce/2010/000099.html Version : ESX 4.0 Installed build : 208167 Fixed build : 256968
51891 H28_MUN_DWEB_Q4_172_16_240_seg.csv 49656 89742 CVE-2009-2409 10 Critical 172.16.240.115 tcp 443 VMware ESX Multiple Vulnerabilities (VMSA-2010-0015) (remote check) The remote VMware ESX host is missing a security-related patch. The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Berkeley DB NSS module - cURL / libcURL - GnuTLS - Network Security Services (NSS) Library - OpenLDAP - OpenSSL - OpenSSL Kerberos - sudo Apply the appropriate patch as referenced in the vendor advisory that pertains to ESX version 4.0 / 4.1. http://lists.vmware.com/pipermail/security-announce/2010/000110.html Version : ESX 4.0 Installed build : 208167 Fixed build : 294855
51902 H28_MUN_DWEB_Q4_172_16_240_seg.csv 49656 89745 CVE-2009-2409 7.5 High 172.16.240.115 tcp 443 VMware ESX Multiple Vulnerabilities (VMSA-2010-0019) (remote check) The remote VMware ESX host is missing a security-related patch. The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - bzip2 - Network Security Services (NSS) Library - OpenSSL - Samba Apply the appropriate patch as referenced in the vendor advisory that pertains to ESX version 3.5 / 4.0 / 4.1. http://lists.vmware.com/pipermail/security-announce/2011/000134.html Version : ESX 4.0 Installed build : 208167 Fixed build : 360236
57321 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 49656 89735 CVE-2009-2409 10 Critical 172.16.240.115 tcp 443 VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2010-0001) (remote check) The remote VMware ESX host is missing a security-related patch. The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Network Security Services (NSS) - NetScape Portable Runtime (NSPR) Apply the appropriate patch according to the vendor advisory that pertains to ESX version 4.0. https://www.vmware.com/security/advisories/VMSA-2010-0001 http://lists.vmware.com/pipermail/security-announce/2010/000083.html Version : ESX 4.0 Installed build : 208167 Fixed build : 219382
57429 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 49656 89740 CVE-2009-2409 10 Critical 172.16.240.115 tcp 443 VMware ESX / ESXi Third-Party Libraries and Components (VMSA-2010-0009) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries : - libpng - VMnc Codec - vmrun - VMware Remote Console (VMrc) - VMware Tools - vmware-authd Apply the appropriate patch according to the vendor advisory that pertains to ESX version 3.5 / 4.0 or ESXi version 3.5 / 4.0. https://www.vmware.com/security/advisories/VMSA-2010-0009 http://lists.vmware.com/pipermail/security-announce/2010/000099.html Version : ESX 4.0 Installed build : 208167 Fixed build : 256968
57472 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 49656 89742 CVE-2009-2409 10 Critical 172.16.240.115 tcp 443 VMware ESX Multiple Vulnerabilities (VMSA-2010-0015) (remote check) The remote VMware ESX host is missing a security-related patch. The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Berkeley DB NSS module - cURL / libcURL - GnuTLS - Network Security Services (NSS) Library - OpenLDAP - OpenSSL - OpenSSL Kerberos - sudo Apply the appropriate patch as referenced in the vendor advisory that pertains to ESX version 4.0 / 4.1. http://lists.vmware.com/pipermail/security-announce/2010/000110.html Version : ESX 4.0 Installed build : 208167 Fixed build : 294855
57483 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 49656 89745 CVE-2009-2409 7.5 High 172.16.240.115 tcp 443 VMware ESX Multiple Vulnerabilities (VMSA-2010-0019) (remote check) The remote VMware ESX host is missing a security-related patch. The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - bzip2 - Network Security Services (NSS) Library - OpenSSL - Samba Apply the appropriate patch as referenced in the vendor advisory that pertains to ESX version 3.5 / 4.0 / 4.1. http://lists.vmware.com/pipermail/security-announce/2011/000134.html Version : ESX 4.0 Installed build : 208167 Fixed build : 360236