The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4773-1 advisory.

  - Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of     other accounts by leveraging an account with the same password hash as another account and a crafted     password reset URL. (CVE-2015-2559)

  - Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to     redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.
    (CVE-2015-2749)

  - Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35     allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors     involving the // initial sequence. (CVE-2015-2750)

  - Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers     to execute arbitrary code because of an issue affecting multiple subsystems with default or common module     configurations. (CVE-2018-7600)

  - A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This     potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in     the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code     Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the     wild. (CVE-2018-7602)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 ESM : Drupal vulnerabilities (USN-4773-1)

critical Nessus Plugin ID 183539

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Oct 23, 2023, 4:39 PM Exploit attributes ("Exploit framework core" set to "True". "Exploit framework d2 elliot" set to "True". "Exploit framework metasploit" set to "True". "Exploited by malware" set to "True") Plugin Feed: 202310231639
Version 1.1 Oct 21, 2023, 10:03 PM CEA reference Plugin Feed: 202310212203
Version 1.0 Oct 21, 2023, 3:09 AM New Plugin Feed: 202310210309