Microsoft Exchange Server Spoofing Vulnerability

The version of ClickHouse installed on the remote host is prior to 21.10.2.15. It is, therefore, affected by multiple vulnerabilities.

  - Heap out-of-bounds read vulnerability in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the     LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data.
    The offset is later used in the length of a copy operation, without checking the upper bounds of the source of     the copy operation. (CVE-2021-42387, CVE-2021-42388)   
  - Divide-by-zero in multiple Clickhouse's compression codecs when parsing a malicious query. The first byte of the     compressed buffer is used in a modulo operation without being checked for 0. (CVE-2021-42389, CVE-2021-42390, CVE-2021-42391)

  - Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits. (CVE-2021-43304, CVE-2021-43305)


Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A session spoofing vulnerability exists. An attacker can     exploit this to perform actions with the privileges of     another user. (CVE-2021-41349, CVE-2021-42305)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-42321)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A session spoofing vulnerability exists. An attacker can     exploit this to perform actions with the privileges of     another user. (CVE-2021-41349, CVE-2021-42305)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-42321)

ID	Name	Product	Family	Type	Severity
216691	ClickHouse < 21.10.2.15 Multiple Vulnerabilities	Nessus	Misc.	Remote	high
155962	Security Updates for Exchange (November 2021) (Remote)	Nessus	Windows	Remote	high
154999	Security Updates for Exchange (November 2021)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2021-42305

medium

Tenable Plugins

high

high

high