a. Updated ESX Service Console package libxml2

   A denial of service flaw was found in the way libxml2 processes    certain content. If an application that is linked against    libxml2 processes malformed XML content, the XML content might    cause the application to stop responding.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2008-3281 to this issue.

   Additionally the following was also fixed, but was missing in the    security advisory.

   A heap-based buffer overflow flaw was found in the way libxml2    handled long XML entity names. If an application linked against    libxml2 processed untrusted malformed XML content, it could cause    the application to crash or, possibly, execute arbitrary code.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2008-3529 to this issue.

b. Updated ESX Service Console package ucd-snmp

   A flaw was found in the way ucd-snmp checks an SNMPv3 packet's    Keyed-Hash Message Authentication Code. An attacker could use    this flaw to spoof an authenticated SNMPv3 packet.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2008-0960 to this issue.

c. Updated third-party library libtiff

   Multiple uses of uninitialized values were discovered in libtiff's    Lempel-Ziv-Welch (LZW) compression algorithm decoder. An attacker    could create a carefully crafted LZW-encoded TIFF file that would    cause an application linked with libtiff to crash or, possibly,    execute arbitrary code.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2008-2327 to this issue.

Sun Management Center 3.6.1_x86: Patch for Solaris 10.
Date this patch was last updated by Sun : Nov/25/09

SunOS 5.10_x86: XML and XSLT libraries patch.
Date this patch was last updated by Sun : Jun/11/15

SunOS 5.10_x86: XML and XSLT libraries pat.
Date this patch was last updated by Sun : Oct/17/16

Sun Java System Access Manager 7.1 Solaris_x86.
Date this patch was last updated by Sun : Apr/23/11

Updated libxml2 packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The libxml2 packages provide a library that allows you to manipulate XML files. It includes support to read, modify, and write XML and HTML files.

A heap-based buffer overflow flaw was found in the way libxml2 handled long XML entity names. If an application linked against libxml2 processed untrusted malformed XML content, it could cause the application to crash or, possibly, execute arbitrary code.
(CVE-2008-3529)

All users of libxml2 are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue.

It was discovered that libxml2 did not correctly handle long entity names. If a user were tricked into processing a specially crafted XML document, a remote attacker could execute arbitrary code with user privileges or cause the application linked against libxml2 to crash, leading to a denial of service. (CVE-2008-3529)

USN-640-1 fixed vulnerabilities in libxml2. When processing extremely large XML documents with valid entities, it was possible to incorrectly trigger the newly added vulnerability protections. This update fixes the problem. (CVE-2008-3281).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A heap-based buffer overflow was found in how libxml2 handled long XML entity names. If an application linked against libxml2 processed untrusted malformed XML content, it could cause the application to crash or possibly execute arbitrary code (CVE-2008-3529).

The updated packages have been patched to prevent this issue. As well, the patch to fix CVE-2008-3281 has been updated to remove the hard-coded entity limit that was set to 5M, instead using XML entity density heuristics. Many thanks to Daniel Veillard of Red Hat for his hard work in tracking down and dealing with the edge cases discovered with the initial fix to this issue.

The remote host is running a version of Sun OpenSSO Enterprise 8.1 earlier than Patch1 Update1. Such versions are potentially affected by a memory corruption vulnerability which an attacker could exploit to crash the affected service, or potentially execute arbitrary code through a specially crafted XML document.

The remote host is running a version of Sun Java System Access Manager 7.1 earlier than Patch 3.  Such versions are potentially affected by multiple issues :

  - A vulnerability related to the CDCServlet component may result in policy advice being presented to the wrong client. (1-66-25968-1)

  - The software amy disclose clear text passwords in debug files when the debug flag is enabled. A local unprivileged user could gain unauthorized access to user identities.

  - A vulnerability may exist when the server processes specially crafted XML documents which may allow an attacker to crash the service or possibly execute arbitrary code.

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.7.  Mac OS X 10.5.7 contains security fixes for the following products : 

- Apache
- ATS
- BIND
- CFNetwork
- CoreGraphics
-Cscope
- CUPS
- Disk Images
- enscript
- Flash player
- Help Viewer
- iChat
- Internation Components for Unicode
- IPSec
- Kerberos
- Kernel
- Launch Services
- libxml
- Net-SNMP
- Network Time
- Networking
- OpenSSL
- PHP
- QuickDraw Manager
- ruby
- Safari
- Spotlight
- system_cmds
- telnet
- WebKit
- X11
- Terminal

The version of Safari installed on the remote Windows host is earlier than 3.2.3.  Such versions are potentially affected by several issues :

 - A heap buffer overflow issue in the libxml library when handling long entity names could lead to a crash or arbitrary code execution. (CVE-2008-3529)

 - Multiple input validation issues exist in Safari's handling of 'feed:' URLs, which could be abused to execute arbitrary JavaScript code. (CVE-2009-0162)

 - A memory corruption issue in WebKit's handling of SVGList objects could lead to arbitrary code execution. (CVE-2009-0945) 

ID	Name	Product	Family	Published	Updated	Severity
40384	VMSA-2008-0017 : Updated ESX packages for libxml2, ucd-snmp, libtiff	Nessus	VMware ESX Local Security Checks	7/27/2009	1/6/2021	critical
107898	Solaris 10 (x86) : 123924-11	Nessus	Solaris Local Security Checks	3/12/2018	1/14/2021	critical
107942	Solaris 10 (x86) : 125732-12	Nessus	Solaris Local Security Checks	3/12/2018	1/14/2021	critical
107943	Solaris 10 (x86) : 125732-13	Nessus	Solaris Local Security Checks	3/12/2018	1/14/2021	critical
107950	Solaris 10 (x86) : 126357-06	Nessus	Solaris Local Security Checks	3/12/2018	1/14/2021	critical
34190	RHEL 3 / 4 / 5 : libxml2 (RHSA-2008:0884)	Nessus	Red Hat Local Security Checks	9/12/2008	1/14/2021	critical
37936	Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : libxml2 vulnerabilities (USN-644-1)	Nessus	Ubuntu Local Security Checks	4/23/2009	1/19/2021	critical
38013	Mandriva Linux Security Advisory : libxml2 (MDVSA-2008:192)	Nessus	Mandriva Local Security Checks	4/23/2009	1/6/2021	critical
5134	Sun OpenSSO Enterprise 8.0 < Patch1 Update1 Memory Corruption	Nessus Network Monitor	Web Servers	8/13/2009	3/6/2019	medium
5133	Sun Java System Access Manager 7.1 < Patch 3 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	8/13/2009	3/6/2019	medium
5023	Mac OS X 10.5 < 10.5.7 Multiple Vulnerabilities	Nessus Network Monitor	Generic	8/18/2004	3/6/2019	critical
5024	Safari < 3.2.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	8/18/2004	3/6/2019	high
800998	Safari < 3.2.3 Multiple Vulnerabilities	Log Correlation Engine	Web Clients			high
800792	Mac OS X 10.5 < 10.5.7 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection			high

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

medium

medium

critical

high

high

high