According to the web server's banner, the version of HP System Management Homepage (SMH) hosted on the remote web server has an implementation of the OpenSSL library that is affected by the following vulnerabilities :

  - An error exists in the ssl3_read_bytes() function that     allows data to be injected into other sessions. Note     that this issue is only exploitable if     'SSL_MODE_RELEASE_BUFFERS' is enabled. (CVE-2010-5298)

  - An error exists related to the implementation of the     Elliptic Curve Digital Signature Algorithm (ECDSA) that     allows nonce disclosure via the 'FLUSH+RELOAD' cache     side-channel attack. (CVE-2014-0076)

  - A buffer overflow condition exists related to invalid     DTLS fragment handling that could lead to execution of     arbitrary code. Note this issue only affects OpenSSL     when used as a DTLS client or server. (CVE-2014-0195)

  - An error exists in the do_ssl3_write() function that     allows a NULL pointer to be dereferenced, resulting in a     denial of service condition. Note that this issue is     exploitable only if 'SSL_MODE_RELEASE_BUFFERS' is     enabled. (CVE-2014-0198)

  - An error exists related to DTLS handshake handling that     could lead to denial of service attacks. Note that this     issue only affects OpenSSL when used as a DTLS client.
    (CVE-2014-0221)

  - An unspecified error exists that allows an attacker to     cause usage of weak keying material leading to     simplified man-in-the-middle attacks. (CVE-2014-0224)

  - An unspecified error exists related to anonymous ECDH     ciphersuites that allows denial of service attacks. Note     that this issue only affects OpenSSL TLS clients.
    (CVE-2014-3470)

The remote Windows host has a version of IBM Global Security Kit prior to 7.0.4.50 / 8.0.14.43 / 8.0.50.20. It is, therefore, affected by the following vulnerabilities :

  - An error exists related to the implementation of the     Elliptic Curve Digital Signature Algorithm (ECDSA) that     could allow nonce disclosure via the 'FLUSH+RELOAD'     cache side-channel attack. (CVE-2014-0076)

  - A denial of service vulnerability exists which an     attacker can exploit by sending a specially crafted SSL     request to cause the host to become unresponsive.
    (CVE-2014-0963)

OpenSSL has been updated to fix an attack on ECDSA Nonces.

Using the FLUSH+RELOAD Cache Side-channel Attack the Nonces could have been recovered. (CVE-2014-0076)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The OpenSSL service on the remote host is vulnerable to a man-in-the-middle (MiTM) attack, based on its acceptance of a specially crafted handshake.

This flaw could allow a MiTM attacker to decrypt or forge SSL messages by telling the service to begin encrypted communications before key material has been exchanged, which causes predictable keys to be used to secure future traffic.

Note that Nessus has only tested for an SSL/TLS MiTM vulnerability (CVE-2014-0224). However, Nessus has inferred that the OpenSSL service on the remote host is also affected by six additional vulnerabilities that were disclosed in OpenSSL's June 5th, 2014 security advisory :

  - An error exists in the 'ssl3_read_bytes' function     that permits data to be injected into other sessions     or allows denial of service attacks. Note that this     issue is exploitable only if SSL_MODE_RELEASE_BUFFERS     is enabled. (CVE-2010-5298)

  - An error exists related to the implementation of the     Elliptic Curve Digital Signature Algorithm (ECDSA) that     allows nonce disclosure via the 'FLUSH+RELOAD' cache     side-channel attack. (CVE-2014-0076)

  - A buffer overflow error exists related to invalid DTLS     fragment handling that permits the execution of     arbitrary code or allows denial of service attacks.
    Note that this issue only affects OpenSSL when used     as a DTLS client or server. (CVE-2014-0195)

  - An error exists in the 'do_ssl3_write' function that     permits a NULL pointer to be dereferenced, which could     allow denial of service attacks. Note that this issue     is exploitable only if SSL_MODE_RELEASE_BUFFERS is     enabled. (CVE-2014-0198)

  - An error exists related to DTLS handshake handling that     could allow denial of service attacks. Note that this     issue only affects OpenSSL when used as a DTLS client.
    (CVE-2014-0221)

  - An error exists in the 'dtls1_get_message_fragment'     function related to anonymous ECDH cipher suites. This     could allow denial of service attacks. Note that this     issue only affects OpenSSL TLS clients. (CVE-2014-3470)

OpenSSL did not release individual patches for these vulnerabilities, instead they were all patched under a single version release. Note that the service will remain vulnerable after patching until the service or host is restarted.

According to its banner, the remote web server uses a version of OpenSSL 0.9.8 prior to 0.9.8za. The OpenSSL library is, therefore, reportedly affected by the following vulnerabilities :

  - An error exists related to the implementation of the     Elliptic Curve Digital Signature Algorithm (ECDSA) that     could allow nonce disclosure via the 'FLUSH+RELOAD'     cache side-channel attack. (CVE-2014-0076)

  - A buffer overflow error exists related to invalid DTLS     fragment handling that could lead to execution of     arbitrary code. Note this issue only affects OpenSSL     when used as a DTLS client or server. (CVE-2014-0195)

  - An error exists related to DTLS handshake handling that     could lead to denial of service attacks. Note this     issue only affects OpenSSL when used as a DTLS client.
    (CVE-2014-0221)

  - An unspecified error exists that could allow an     attacker to cause usage of weak keying material     leading to simplified man-in-the-middle attacks.
    (CVE-2014-0224)

  - An unspecified error exists related to anonymous ECDH     ciphersuites that could allow denial of service     attacks. Note this issue only affects OpenSSL TLS     clients. (CVE-2014-3470)

The remote host is running a version of McAfee VirusScan Enterprise for Linux (VSEL) that is affected by multiple vulnerabilities due to flaws in the included OpenSSL library :

  - An error exists in the function 'ssl3_read_bytes'     that could allow data to be injected into other     sessions or allow denial of service attacks. Note     this issue is only exploitable if     'SSL_MODE_RELEASE_BUFFERS' is enabled. (CVE-2010-5298)

  - An error exists related to the implementation of the     Elliptic Curve Digital Signature Algorithm (ECDSA) that     could allow nonce disclosure via the 'FLUSH+RELOAD'     cache side-channel attack. (CVE-2014-0076)

  - A buffer overflow error exists related to invalid DTLS     fragment handling that could lead to execution of     arbitrary code. Note this issue only affects OpenSSL     when used as a DTLS client or server. (CVE-2014-0195)

  - An error exists in the function 'do_ssl3_write' that     could allow a NULL pointer to be dereferenced leading     to denial of service attacks. Note this issue is     exploitable only if 'SSL_MODE_RELEASE_BUFFERS' is     enabled. (CVE-2014-0198)

  - An error exists related to DTLS handshake handling that     could lead to denial of service attacks. Note this     issue only affects OpenSSL when used as a DTLS client.
    (CVE-2014-0221)

  - An unspecified error exists that could allow an     attacker to cause usage of weak keying material     leading to simplified man-in-the-middle attacks.
    (CVE-2014-0224)

  - An unspecified error exists related to anonymous ECDH     cipher suites that could allow denial of service     attacks. Note this issue only affects OpenSSL TLS     clients. (CVE-2014-3470)

The remote host is running IBM WebSphere Application Server version 8.0 prior to Fix Pack 10. It is, therefore, affected by the following vulnerabilities :

  - Multiple errors exist related to the included IBM HTTP     server that can allow remote code execution or denial     of service. (CVE-2013-5704, CVE-2014-0118,     CVE-2014-0226, CVE-2014-0231 / PI22070)

  - An error exists related to the implementation of the     Elliptic Curve Digital Signature Algorithm (ECDSA) that     could allow nonce disclosure via the 'FLUSH+RELOAD'     cache side-channel attack. (CVE-2014-0076 / PI19700)

  - An unspecified error exists related to HTTP headers that     can allow information disclosure. (CVE-2014-3021 /     PI08268)

  - An unspecified error caused by improper account creation     with the Virtual Member Manager SPI Admin Task     'addFileRegistryAccount' can allow remote attackers to     bypass security restrictions. (CVE-2014-3070 / PI16765)

  - An information disclosure vulnerability exists due to a     failure to restrict access to resources located within     the web application. A remote attacker can exploit this     to obtain configuration data and other sensitive     information. (CVE-2014-3083 / PI17768, PI30579 )

  - A man-in-the-middle (MitM) information disclosure     vulnerability known as POODLE. The vulnerability is due     to the way SSL 3.0 handles padding bytes when decrypting     messages encrypted using block ciphers in cipher block     chaining (CBC) mode. MitM attackers can decrypt a     selected byte of a cipher text in as few as 256 tries if     they are able to force a victim application to     repeatedly send the same data over newly created SSL 3.0     connections. (CVE-2014-3566 / PI28435, PI28436, PI28437)

  - An unspecified flaw in the Load Balancer for IPv4     Dispatcher component allows a remote attacker to cause     a denial of service. (CVE-2014-4764 / PI21189)

  - An unspecified input validation error exists related to     the administrative console that can allow cross-site     scripting and cross-site request forgery attacks.
    (CVE-2014-4770, CVE-2014-4816 / PI23055)

  - An error exists related to the Communications Enabled     Applications (CEA) service that can allow XML External     Entity Injection (XXE) attacks leading to information     disclosure. This only occurs if CEA is enabled, and by     default this is disabled. (CVE-2014-6166 / PI25310)

  - An input validation error exists related to session     input using URL rewriting that can allow cross-site     scripting attacks. (CVE-2014-6167 / PI23819)

  - An error exists related to the administrative console     that can allow click-jacking attacks. (CVE-2014-6174 /     PI27152)

The version of VMware Workstation installed on the remote host is version 10.x prior to 10.0.2.  It is, therefore, reportedly affected by the following vulnerabilities in the OpenSSL library :

  - An error exists related to the implementation of the     Elliptic Curve Digital Signature Algorithm (ECDSA) that     could allow nonce disclosure via the 'FLUSH+RELOAD'     cache side-channel attack. (CVE-2014-0076)

  - An out-of-bounds read error, known as the 'Heartbleed     Bug', exists related to handling TLS heartbeat     extensions that could allow an attacker to obtain     sensitive information such as primary key material,     secondary key material and other protected content.
    (CVE-2014-0160)

The remote host is affected by the vulnerability described in GLSA-201404-07 (OpenSSL: Information Disclosure)

    Multiple vulnerabilities have been found in OpenSSL:
      OpenSSL incorrectly handles memory in the TLS heartbeat extension,         leading to information disclosure of 64kb per request, possibly         including private keys (&ldquo;Heartbleed bug&rdquo;, OpenSSL 1.0.1 only,         CVE-2014-0160).
      The Montgomery ladder implementation of OpenSSL improperly handles         swap operations (CVE-2014-0076).
  Impact :

    A remote attacker could exploit these issues to disclose information,       including private keys or other sensitive information, or perform       side-channel attacks to obtain ECDSA nonces.
  Workaround :

    Disabling the tls-heartbeat USE flag (enabled by default) provides a       workaround for the CVE-2014-0160 issue.

A version of IBM General Parallel File System (GPFS) prior to 3.5.0.17 is installed on the remote host. It is, therefore, affected by multiple vulnerabilities related to OpenSSL:

  - An information disclosure vulnerability exists due to a     flaw in the OpenSSL library, due to an implementation     error in ECDSA (Elliptic Curve Digital Signature     Algorithm). An attacker could potentially exploit this     vulnerability to recover ECDSA nonces. (CVE-2014-0076)

  - An information disclosure vulnerability exists due to a     flaw in the OpenSSL library, commonly known as the     Heartbleed bug. An attacker could potentially exploit     this vulnerability repeatedly to read up to 64KB of     memory from the device. (CVE-2014-0160)

The remote host is running a version of Mac OS X that is older than 10.9.5, and is thus missing security-related fixes for the following components:

  - Bluetooth
  - CoreGraphics
  - Foundation
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOKit
  - Intel Graphics Driver
  - Kernel
  - Libnotify
  - OpenSSL
  - QT Media Foundation
  - apache_mod_php
  - ruby

Note that successful exploitation of the most serious issues could result in arbitrary code execution.

OpenSSL versions 1.0.1 earlier than 1.0.1g contain the following vulnerabilities:

  - Out-of-bounds read flaw that can be triggered through TLS heartbeat extension packets to disclose up to 64kB of memory containing sensitive information, possibly including secret keys. (CVE-2014-0160)

  - Improperly implemented Elliptic Curve Digital Signature Algorithm (ECDSA) could allow nonce disclosure via the 'FLUSH+RELOAD' cache side-channel attack. (CVE-2014-0076)

ID	Name	Product	Family	Published	Updated	Severity
76345	HP System Management Homepage < 7.2.4.1 / 7.3.3.1 OpenSSL Multiple Vulnerabilities	Nessus	Web Servers	7/2/2014	11/26/2019	medium
74287	IBM Global Security Kit 7 < 7.0.4.50 / 8.0.14.x < 8.0.14.43 / 8.0.50.x < 8.0.50.20 Multiple Vulnerabilities	Nessus	Windows	6/3/2014	11/26/2019	low
83619	SUSE SLES10 Security Update : OpenSSL (SUSE-SU-2014:0538-1)	Nessus	SuSE Local Security Checks	5/20/2015	1/19/2021	medium
77200	OpenSSL 'ChangeCipherSpec' MiTM Vulnerability	Nessus	Misc.	8/14/2014	3/11/2021	medium
74363	OpenSSL 0.9.8 < 0.9.8za Multiple Vulnerabilities	Nessus	Web Servers	6/6/2014	11/26/2019	medium
76580	McAfee VirusScan Enterprise for Linux Multiple OpenSSL Vulnerabilities (SB10075)	Nessus	Misc.	7/17/2014	10/25/2021	medium
81401	IBM WebSphere Application Server 8.0 < Fix Pack 10 Multiple Vulnerabilities (POODLE)	Nessus	Web Servers	2/18/2015	11/25/2019	medium
73674	VMware Workstation 10.x < 10.0.2 OpenSSL Library Multiple Vulnerabilities (VMSA-2014-0004) (Heartbleed)	Nessus	Windows	4/21/2014	11/26/2019	medium
73407	GLSA-201404-07 : OpenSSL: Information Disclosure	Nessus	Gentoo Local Security Checks	4/8/2014	1/6/2021	high
74104	IBM General Parallel File System 3.5 < 3.5.0.17 Multiple OpenSSL Vulnerabilities (Heartbleed)	Nessus	Windows	5/20/2014	11/26/2019	medium
8394	Mac OS X < 10.9.5 Multiple Vulnerabilities (Security Update 2014-004)	Nessus Network Monitor	Web Clients	9/19/2014	3/6/2019	critical
8194	OpenSSL 1.0.1 < 1.0.1g Multiple Vulnerabilities (Heartbleed)	Nessus Network Monitor	Web Servers	4/8/2014	3/6/2019	medium

Plugins Search

medium

low

medium

medium

medium

medium

medium

medium

high

medium

critical

medium