The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-870:02 advisory.

    Description of problem:
     abrt     abrt is a tool to help users to detect defects in applications and to create a bug report with all     informations needed by maintainer to fix it. It uses plugin system to extend its functionality.
     libreport     Libraries providing API for reporting different problems in applications to different bug targets like     Bugzilla, ftp, trac, etc...
     btparser     Btparser is a backtrace parser and analyzer, which works with backtraces produced by the GNU Project     Debugger. It can parse a text file with a backtrace to a tree of C structures, allowing to analyze the     threads and frames of the backtrace and work with them.
    Btparser also contains some backtrace manipulation and extraction routines:
     it can find a frame in the crash-time backtrace where the program most likely crashed (a chance is that     the function described in that frame is buggy)      it can produce a duplication hash of the backtrace, which helps to discover that two crash-time     backtraces are duplicates, triggered by the same flaw of the code      it can rate the backtrace quality, which depends on the number of frames with and without the function     name known (missing function name is caused by missing debugging symbols)      python-meh     The python-meh package is a python library for handling, saving, and reporting exceptions.
    Security issues fixed with this release:
     CVE-2011-4088     No description available at the time of writing, please use the CVE links below.
     CVE-2012-1106     The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not     properly set the group (GID) permissions on core dump files for setuid programs when the sysctl     fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 4 : abrt-2.0.8-6.0.1.AXS4, btparser-0.16-3.AXS4, libreport-2.0.9-5.0.1.AXS4, python-meh-0.12.1-3.AXS4 (AXSA:2012-870:02)

high Nessus Plugin ID 284381

Version 1.2

Version 1.1

Version 1.2 Jan 20, 2026, 4:27 AM Detection (updated detection logic) Plugin Feed: 202601200427
Version 1.1 Jan 14, 2026, 9:57 PM New Plugin Feed: 202601142157