Photon OS 1.0: Bindutils / Krb5 / Ruby / Sudo / Zlib PHSA-2017-0021 (deprecated)

high Nessus Plugin ID 111870

Synopsis

This plugin has been deprecated.

Description

An update of [zlib,bindutils,ruby,krb5,sudo] packages for PhotonOS has been released.

Solution

n/a.

See Also

http://www.nessus.org/u?11072ed6

Plugin Details

Severity: High

ID: 111870

File Name: PhotonOS_PHSA-2017-0021.nasl

Version: 1.3

Type: local

Published: 8/17/2018

Updated: 4/5/2019

Risk Information

CVSS Score Source: CVE-2016-2776

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.1

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Temporal Vector: E:POC/RL:OF/RC:C

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: E:P/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:vmware:photonos:bindutils, p-cpe:/a:vmware:photonos:krb5, p-cpe:/a:vmware:photonos:ruby, p-cpe:/a:vmware:photonos:sudo, p-cpe:/a:vmware:photonos:zlib, cpe:/o:vmware:photonos:1.0

Required KB Items: Host/local_checks_enabled, Host/PhotonOS/release, Host/PhotonOS/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 6/22/2017

Reference Information

CVE: CVE-2016-2776, CVE-2016-3120, CVE-2016-9841, CVE-2016-9843, CVE-2016-1000368, CVE-2017-9224, CVE-2017-9225, CVE-2017-9227, CVE-2017-9229, CVE-2017-1000367, CVE-2017-1000368