Mac OS X 10.10.x < 10.10.2 Multiple Vulnerabilities (POODLE) - Nessus

Critical   Plugin ID: 81087

---

This page contains detailed information about the Mac OS X 10.10.x < 10.10.2 Multiple Vulnerabilities (POODLE) Nessus plugin including available exploits and PoCs found on GitHub, in Metasploit or Exploit-DB for verifying of this vulnerability.

Plugin Overview

---

ID: 81087
Name: Mac OS X 10.10.x < 10.10.2 Multiple Vulnerabilities (POODLE)
Filename: macosx_10_10_2.nasl
Vulnerability Published: 2014-09-17
This Plugin Published: 2015-01-29
Last Modification Time: 2019-11-25
Plugin Version: 1.20
Plugin Type: combined
Plugin Family: MacOS X Local Security Checks
Dependencies: os_fingerprint.nasl, ssh_get_info.nasl

Vulnerability Information

---

Severity: Critical
Vulnerability Published: 2014-09-17
Patch Published: 2015-01-27
CVE [?]: CVE-2014-1595, CVE-2014-3192, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-4371, CVE-2014-4389, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-4460, CVE-2014-4461, CVE-2014-4476, CVE-2014-4477, CVE-2014-4479, CVE-2014-4481, CVE-2014-4483, CVE-2014-4484, CVE-2014-4485, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-4491, CVE-2014-4492, CVE-2014-4495, CVE-2014-4498, CVE-2014-4499, CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-7861, CVE-2014-8517, CVE-2014-8817, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-8822, CVE-2014-8823, CVE-2014-8824, CVE-2014-8825, CVE-2014-8826, CVE-2014-8827, CVE-2014-8830, CVE-2014-8831, CVE-2014-8832, CVE-2014-8833, CVE-2014-8834, CVE-2014-8835, CVE-2014-8836, CVE-2014-8837, CVE-2014-8838, CVE-2014-8839
CPE [?]: cpe:/o:apple:mac_os_x
In the News: True

Synopsis

The remote host is missing a Mac OS X update that fixes multiple vulnerabilities.

Description

The remote host is running a version of Mac OS X 10.10.x that is prior to version 10.10.2. This update contains several security-related fixes for the following components :

- bash - Bluetooth - CFNetwork Cache - CommerceKit Framework - CoreGraphics - CoreSymbolication - CPU Software - FontParser - Foundation - Intel Graphics Driver - IOAcceleratorFamily - IOHIDFamily - IOKit - IOUSBFamily - Kernel - LaunchServices - libnetcore - LoginWindow - lukemftp - OpenSSL - Safari - SceneKit - Security - security_taskgate - Spotlight - SpotlightIndex - sysmond - UserAccountUpdater

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

Solution

Upgrade to Mac OS X 10.10.2 or later.

Public Exploits

---

Target Network Port(s): N/A
Target Asset(s): Host/MacOSX/Version, Host/OS
Exploit Available: True (Metasploit Framework, Exploit-DB, GitHub)
Exploit Ease: Exploits are available

Here's the list of publicly known exploits and PoCs for verifying the Mac OS X 10.10.x < 10.10.2 Multiple Vulnerabilities (POODLE) vulnerability:

1. Metasploit: exploit/unix/http/tnftp_savefile
   [tnftp "savefile" Arbitrary Command Execution]
2. Metasploit: auxiliary/scanner/http/ssl_version
   [HTTP SSL/TLS Version Detection (POODLE scanner)]
3. Exploit-DB: exploits/linux/dos/35081.txt
   [EDB-35081: Binary File Descriptor Library (libbfd) - Out-of-Bounds Crash]
4. Exploit-DB: exploits/multiple/dos/45651.c
   [EDB-45651: Apple iOS/macOS - Kernel Memory Corruption due to Integer Overflow in IOHIDResourceQueue::enqueueReport]
5. Exploit-DB: exploits/osx/local/35934.txt
   [EDB-35934: Apple Mac OSX < 10.10.x - GateKeeper Bypass]
6. Exploit-DB: exploits/linux/remote/34860.py
   [EDB-34860: GNU bash 4.3.11 - Environment Variable dhclient]
7. Exploit-DB: exploits/bsd/remote/35427.py
   [EDB-35427: tnftp (FreeBSD 8/9/10) - 'tnftp' Client Side]
8. Exploit-DB: exploits/linux/remote/36933.py
   [EDB-36933: dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)]
9. Exploit-DB: exploits/unix/remote/43112.rb
   [EDB-43112: tnftp - 'savefile' Arbitrary Command Execution (Metasploit)]
10. GitHub: https://github.com/84KaliPleXon3/a2sv
    [CVE-2014-3566]
11. GitHub: https://github.com/Artem-Salnikov/devops-netology
    [CVE-2014-3566]
12. GitHub: https://github.com/F4RM0X/script_a2sv
    [CVE-2014-3566]
13. GitHub: https://github.com/H4CK3RT3CH/a2sv
    [CVE-2014-3566]
14. GitHub: https://github.com/Mre11i0t/a2sv
    [CVE-2014-3566]
15. GitHub: https://github.com/PwnCast/CVE-2014-3566
    [CVE-2014-3566: PoC for exploiting CVE-2014-3566 : The SSL protocol 3.0, as used in OpenSSL through ...]
16. GitHub: https://github.com/Vladislav-Pugachev/netology-DevOps-dz_-14
    [CVE-2014-3566]
17. GitHub: https://github.com/WiktorMysz/devops-netology
    [CVE-2014-3566]
18. GitHub: https://github.com/alexandrburyakov/Rep2
    [CVE-2014-3566]
19. GitHub: https://github.com/ashmastaflash/mangy-beast
    [CVE-2014-3566: CloudPassage Halo policy for detecting vulnerability to CVE-2014-3566 (AKA POODLE) ...]
20. GitHub: https://github.com/bysart/devops-netology
    [CVE-2014-3566]
21. GitHub: https://github.com/camel-clarkson/non-controlflow-hijacking-datasets
    [CVE-2014-3566]
22. GitHub: https://github.com/fireorb/sslscanner
    [CVE-2014-3566]
23. GitHub: https://github.com/giusepperuggiero96/Network-Security-2021
    [CVE-2014-3566]
24. GitHub: https://github.com/ilya-starchikov/devops-netology
    [CVE-2014-3566]
25. GitHub: https://github.com/marcocastro100/Intrusion_Detection_System-Python
    [CVE-2014-3566]
26. GitHub: https://github.com/mikemackintosh/ruby-qualys
    [CVE-2014-3566]
27. GitHub: https://github.com/mikesplain/CVE-2014-3566-poodle-cookbook
    [CVE-2014-3566]
28. GitHub: https://github.com/mpgn/poodle-PoC
    [CVE-2014-3566: :poodle: Poodle (Padding Oracle On Downgraded Legacy Encryption) attack ...]
29. GitHub: https://github.com/nyc-tophile/A2SV--SSL-VUL-Scan
    [CVE-2014-3566: A2SV = Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, ...]
30. GitHub: https://github.com/pashicop/3.9_1
    [CVE-2014-3566]
31. GitHub: https://github.com/shanekeels/harden-ssl-tls-windows
    [CVE-2014-3566]
32. GitHub: https://github.com/stdevel/poodle_protector
    [CVE-2014-3566: Python script for automatically protecting your systems against POODLE vulnerability ...]
33. GitHub: https://github.com/vshaliii/Hacklab-Vulnix
    [CVE-2014-3566]
34. GitHub: https://github.com/yellownine/netology-DevOps
    [CVE-2014-3566]
35. GitHub: https://github.com/RedHatOfficial/rhsecapi
    [CVE-2014-3567]
36. GitHub: https://github.com/RedHatProductSecurity/cve-pylib
    [CVE-2014-3567]
37. GitHub: https://github.com/IonicaBizau/made-in-argentina
    [CVE-2014-4481]
38. GitHub: https://github.com/feliam/CVE-2014-4481
    [CVE-2014-4481: Apple CoreGraphics framework fails to validate the input when parsing CCITT group 3 ...]
39. GitHub: https://github.com/MrCl0wnLab/ShellShockHunter
    [CVE-2014-6277]
40. GitHub: https://github.com/googleinurl/Xpl-SHELLSHOCK-Ch3ck
    [CVE-2014-6277]
41. GitHub: https://github.com/MrCl0wnLab/ShellShockHunter
    [CVE-2014-7186]
42. GitHub: https://github.com/SaltwaterC/sploit-tools
    [CVE-2014-7186]
43. GitHub: https://github.com/dokku-alt/dokku-alt
    [CVE-2014-7186]
44. GitHub: https://github.com/foobarto/redteam-notebook
    [CVE-2014-7186]
45. GitHub: https://github.com/googleinurl/Xpl-SHELLSHOCK-Ch3ck
    [CVE-2014-7186]
46. GitHub: https://github.com/meherarfaoui09/meher
    [CVE-2014-7186]
47. GitHub: https://github.com/MrCl0wnLab/ShellShockHunter
    [CVE-2014-7187]
48. GitHub: https://github.com/SaltwaterC/sploit-tools
    [CVE-2014-7187]
49. GitHub: https://github.com/dokku-alt/dokku-alt
    [CVE-2014-7187]
50. GitHub: https://github.com/foobarto/redteam-notebook
    [CVE-2014-7187]
51. GitHub: https://github.com/googleinurl/Xpl-SHELLSHOCK-Ch3ck
    [CVE-2014-7187]
52. GitHub: https://github.com/meherarfaoui09/meher
    [CVE-2014-7187]
53. GitHub: https://github.com/offensive-security/exploitdb-bin-sploits/blob/master/bin-sploits/35081.bin
    [EDB-35081]
54. GitHub: https://github.com/cloudpassage/mangy-beast
    [CVE-2014-3566: CloudPassage Halo policy for detecting vulnerability to CVE-2014-3566 (AKA POODLE) ...]

Before running any exploit against any system, make sure you are authorized by the owner of the target system(s) to perform such activity. In any other case, this would be considered as an illegal activity.

WARNING: Beware of using unverified exploits from sources such as GitHub or Exploit-DB. These exploits and PoCs could contain malware. For more information, see how to use exploits safely.

Risk Information

---

CVSS Score Source [?]: CVE-2014-8836
CVSS V2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C

CVSS Base Score:	10.0 (High)
Impact Subscore:	10.0
Exploitability Subscore:	10.0
CVSS Temporal Score:	8.3 (High)
CVSS Environmental Score:	NA (None)
Modified Impact Subscore:	NA
Overall CVSS Score:	8.3 (High)

CVSS V3 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

CVSS Base Score:	9.8 (Critical)
Impact Subscore:	5.9
Exploitability Subscore:	3.9
CVSS Temporal Score:	9.1 (Critical)
CVSS Environmental Score:	NA (None)
Modified Impact Subscore:	NA
Overall CVSS Score:	9.1 (Critical)

STIG Severity [?]: I
STIG Risk Rating: High

Go back to menu.

Plugin Source

---

This is the macosx_10_10_2.nasl nessus plugin source code. This script is Copyright (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.

#
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(81087);
  script_version("1.20");
  script_cvs_date("Date: 2019/11/25");

  script_cve_id(
    "CVE-2014-1595",
    "CVE-2014-3192",
    "CVE-2014-3566",
    "CVE-2014-3567",
    "CVE-2014-3568",
    "CVE-2014-4371",
    "CVE-2014-4389",
    "CVE-2014-4419",
    "CVE-2014-4420",
    "CVE-2014-4421",
    "CVE-2014-4460",
    "CVE-2014-4461",
    "CVE-2014-4476",
    "CVE-2014-4477",
    "CVE-2014-4479",
    "CVE-2014-4481",
    "CVE-2014-4483",
    "CVE-2014-4484",
    "CVE-2014-4485",
    "CVE-2014-4486",
    "CVE-2014-4487",
    "CVE-2014-4488",
    "CVE-2014-4489",
    "CVE-2014-4491",
    "CVE-2014-4492",
    "CVE-2014-4495",
    "CVE-2014-4498",
    "CVE-2014-4499",
    "CVE-2014-6277",
    "CVE-2014-7186",
    "CVE-2014-7187",
    "CVE-2014-7861",
    "CVE-2014-8517",
    "CVE-2014-8817",
    "CVE-2014-8819",
    "CVE-2014-8820",
    "CVE-2014-8821",
    "CVE-2014-8822",
    "CVE-2014-8823",
    "CVE-2014-8824",
    "CVE-2014-8825",
    "CVE-2014-8826",
    "CVE-2014-8827",
    "CVE-2014-8830",
    "CVE-2014-8831",
    "CVE-2014-8832",
    "CVE-2014-8833",
    "CVE-2014-8834",
    "CVE-2014-8835",
    "CVE-2014-8836",
    "CVE-2014-8837",
    "CVE-2014-8838",
    "CVE-2014-8839"
  );
  script_bugtraq_id(
    69919,
    69924,
    69927,
    69928,
    69950,
    70152,
    70154,
    70165,
    70249,
    70273,
    70574,
    70585,
    70586,
    70792,
    71135,
    71136,
    71394,
    72327,
    72328,
    72329,
    72330,
    72331
  );
  script_xref(name:"CERT", value:"577193");
  script_xref(name:"IAVA", value:"2014-A-0142");
  script_xref(name:"APPLE-SA", value:"APPLE-SA-2015-01-27-4");

  script_name(english:"Mac OS X 10.10.x < 10.10.2 Multiple Vulnerabilities (POODLE)");
  script_summary(english:"Checks the version of Mac OS X.");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is missing a Mac OS X update that fixes multiple
vulnerabilities.");
  script_set_attribute(attribute:"description", value:
"The remote host is running a version of Mac OS X 10.10.x that is prior
to version 10.10.2. This update contains several security-related
fixes for the following components :

  - bash
  - Bluetooth
  - CFNetwork Cache
  - CommerceKit Framework
  - CoreGraphics
  - CoreSymbolication
  - CPU Software
  - FontParser
  - Foundation
  - Intel Graphics Driver
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOKit
  - IOUSBFamily
  - Kernel
  - LaunchServices
  - libnetcore
  - LoginWindow
  - lukemftp
  - OpenSSL
  - Safari
  - SceneKit
  - Security
  - security_taskgate
  - Spotlight
  - SpotlightIndex
  - sysmond
  - UserAccountUpdater

Note that successful exploitation of the most serious issues can
result in arbitrary code execution.");
  script_set_attribute(attribute:"see_also", value:"http://support.apple.com/en-us/HT204244");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/archive/1/534559");
  script_set_attribute(attribute:"see_also", value:"https://www.imperialviolet.org/2014/10/14/poodle.html");
  script_set_attribute(attribute:"see_also", value:"https://www.openssl.org/~bodo/ssl-poodle.pdf");
  script_set_attribute(attribute:"see_also", value:"https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Mac OS X 10.10.2 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:F/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2014-8836");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"metasploit_name", value:'tnftp "savefile" Arbitrary Command Execution');
  script_set_attribute(attribute:"exploit_framework_metasploit", value:"true");
  script_set_attribute(attribute:"in_the_news", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2014/09/17");
  script_set_attribute(attribute:"patch_publication_date", value:"2015/01/27");
  script_set_attribute(attribute:"plugin_publication_date", value:"2015/01/29");

  script_set_attribute(attribute:"plugin_type", value:"combined");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:apple:mac_os_x");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"MacOS X Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl", "os_fingerprint.nasl");
  script_require_ports("Host/MacOSX/Version", "Host/OS");

  exit(0);
}

include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");

os = get_kb_item("Host/MacOSX/Version");
if (!os)
{
  os = get_kb_item_or_exit("Host/OS");
  if ("Mac OS X" >!< os) audit(AUDIT_OS_NOT, "Mac OS X");

  c = get_kb_item("Host/OS/Confidence");
  if (c <= 70) exit(1, "Can't determine the host's OS with sufficient confidence.");
}
if (!os) audit(AUDIT_OS_NOT, "Mac OS X");

match = eregmatch(pattern:"Mac OS X ([0-9]+(\.[0-9]+)+)", string:os);
if (isnull(match)) exit(1, "Failed to parse the Mac OS X version ('" + os + "').");

version = match[1];
if (!ereg(pattern:"^10\.10([^0-9]|$)", string:version)) audit(AUDIT_OS_NOT, "Mac OS X 10.10", "Mac OS X "+version);

fixed_version = "10.10.2";
if (ver_compare(ver:version, fix:fixed_version, strict:FALSE) == -1)
{
  if (report_verbosity > 0)
    {
      report = '\n  Installed version : ' + version +
               '\n  Fixed version     : ' + fixed_version +
               '\n';
      security_hole(port:0, extra:report);
    }
    else security_hole(0);
    exit(0);
}
else exit(0, "The host is not affected as it is running Mac OS X "+version+".");

The latest version of this script can be found in these locations depending on your platform:

• Linux / Unix:
  /opt/nessus/lib/nessus/plugins/macosx_10_10_2.nasl
• Windows:
  C:\ProgramData\Tenable\Nessus\nessus\plugins\macosx_10_10_2.nasl
• Mac OS X:
  /Library/Nessus/run/lib/nessus/plugins/macosx_10_10_2.nasl

Go back to menu.

How to Run

---

Here is how to run the Mac OS X 10.10.x < 10.10.2 Multiple Vulnerabilities (POODLE) as a standalone plugin via the Nessus web user interface (https://localhost:8834/):

1. Click to start a New Scan.
2. Select Advanced Scan.
3. Navigate to the Plugins tab.
4. On the top right corner click to Disable All plugins.
5. On the left side table select MacOS X Local Security Checks plugin family.
6. On the right side table select Mac OS X 10.10.x < 10.10.2 Multiple Vulnerabilities (POODLE) plugin ID 81087.
7. Specify the target on the Settings tab and click to Save the scan.
8. Run the scan.

Here are a few examples of how to run the plugin in the command line. Note that the examples below demonstrate the usage on the Linux / Unix platform.

Basic usage:

/opt/nessus/bin/nasl macosx_10_10_2.nasl -t <IP/HOST>

Run the plugin with audit trail message on the console:

/opt/nessus/bin/nasl -a macosx_10_10_2.nasl -t <IP/HOST>

Run the plugin with trace script execution written to the console (useful for debugging):

/opt/nessus/bin/nasl -T - macosx_10_10_2.nasl -t <IP/HOST>

Run the plugin with using a state file for the target and updating it (useful for running multiple plugins on the target):

/opt/nessus/bin/nasl -K /tmp/state macosx_10_10_2.nasl -t <IP/HOST>

Go back to menu.

References

---

BID | SecurityFocus Bugtraq ID:

• 69919, 69924, 69927, 69928, 69950, 70152, 70154, 70165, 70249, 70273, 70574, 70585, 70586, 70792, 71135, 71136, 71394, 72327, 72328, 72329, 72330, 72331

IAVA | Information Assurance Vulnerability Alert:

• 2014-A-0142

CERT | Computer Emergency Response Team:

• 577193

APPLE-SA | Apple Security Advisory:

• 2015-01-27-4

See also:

• https://www.tenable.com/plugins/nessus/81087
• https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00
• https://www.imperialviolet.org/2014/10/14/poodle.html
• https://www.openssl.org/~bodo/ssl-poodle.pdf
• http://support.apple.com/en-us/HT204244
• http://www.securityfocus.com/archive/1/534559
• https://vulners.com/nessus/MACOSX_10_10_2.NASL

Similar and related Nessus plugins:

• 80908 - Oracle Java SE Multiple Vulnerabilities (January 2015 CPU) (POODLE)
• 80912 - Oracle Secure Global Desktop Multiple Vulnerabilities (January 2015 CPU) (POODLE)
• 80918 - Apache Traffic Server 5.1.x < 5.1.1 Multiple Vulnerabilities (POODLE)
• 80921 - Amazon Linux AMI : java-1.7.0-openjdk (ALAS-2015-471) (POODLE)
• 80922 - Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2015-472) (POODLE)
• 80931 - RHEL 5 / 6 / 7 : java-1.7.0-oracle (RHSA-2015:0079) (POODLE)
• 80932 - RHEL 6 : java-1.8.0-oracle (RHSA-2015:0080) (POODLE)
• 81005 - CentOS 5 / 6 / 7 : java-1.6.0-openjdk (CESA-2015:0085) (POODLE)
• 81011 - Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2015-0085) (POODLE)
• 81013 - RHEL 5 / 6 / 7 : java-1.6.0-openjdk (RHSA-2015:0085) (POODLE)
• 81014 - RHEL 5 / 6 / 7 : java-1.6.0-sun (RHSA-2015:0086) (POODLE)
• 81015 - Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x, SL6.x, SL7.x i386/x86_64 (20150126) (POODLE)
• 81043 - Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-2486-1) (POODLE)
• 81045 - Ubuntu 14.04 LTS / 14.10 : openjdk-7 vulnerabilities (USN-2487-1) (POODLE)
• 81050 - Apple iOS < 8.1.3 Multiple Vulnerabilities
• 81079 - VMSA-2015-0001 : VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues (POODLE)
• 81085 - ESXi 5.5 < Build 2352327 Multiple Vulnerabilities (remote check) (POODLE)
• 81088 - Mac OS X Multiple Vulnerabilities (Security Update 2015-001) (POODLE)
• 81090 - Debian DSA-3144-1 : openjdk-7 - security update (POODLE)
• 81111 - Debian DSA-3147-1 : openjdk-6 - security update (POODLE)
• 81141 - openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2015:0190-1) (POODLE)
• 81145 - Apple TV < 7.0.3 Multiple Vulnerabilities
• 81146 - VMware Security Updates for vCenter Server (VMSA-2015-0001) (POODLE)
• 81200 - RHEL 6 : rhev-hypervisor6 (RHSA-2015:0126) (GHOST)
• 81326 - Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2015-480) (POODLE)
• 81401 - IBM WebSphere Application Server 8.0 < Fix Pack 10 Multiple Vulnerabilities (POODLE)
• 81419 - SuSE 11.3 Security Update : java-1_7_0-openjdk (SAT Patch Number 10286)
• 81491 - AIX Java Advisory : java_feb2015_advisory.asc (POODLE)
• 81505 - RHEL 5 / 6 : Red Hat Satellite IBM Java Runtime (RHSA-2015:0264) (POODLE)
• 81649 - Apache Tomcat 6.0.x < 6.0.43 Multiple Vulnerabilities (POODLE)
• 81650 - Apache Tomcat 7.0.x < 7.0.57 Multiple Vulnerabilities (POODLE)
• 81651 - Apache Tomcat 8.0.x < 8.0.15 Multiple Vulnerabilities (POODLE)
• 81784 - IBM Rational ClearQuest 7.1.x < 7.1.2.16 / 8.0.0.x < 8.0.0.13 / 8.0.1.x < 8.0.1.6 Multiple Vulnerabilities (credentialed check) (POODLE)
• 81825 - IBM WebSphere Application Server 7.0 < Fix Pack 37 Multiple Vulnerabilities (POODLE)

Version

---

This page has been produced using Nessus Professional 10.1.2 (#68) LINUX, Plugin set 202205072148.
Plugin file macosx_10_10_2.nasl version 1.20. For more plugins, visit the Nessus Plugin Library.

Go back to menu.