{"id": "SOLARIS11_LDOMS_20150714.NASL", "bulletinFamily": "scanner", "title": "Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)", "description": "The remote Solaris system is missing necessary patches to address an unspecified flaw that exists in the LDOM Manager subcomponent of Oracle VM Server for SPARC. A remote, unauthenticated attacker can exploit this, via multiple protocols, to cause a denial of service condition.", "published": "2015-07-16T00:00:00", "modified": "2018-11-15T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=84807", "reporter": "Tenable", "references": ["https://support.oracle.com/rs?type=doc&id=2018633.1", "http://www.nessus.org/u?178c8ed1", "http://www.nessus.org/u?d18c2a85", "https://support.oracle.com/rs?type=doc&id=20018633.1"], "cvelist": ["CVE-2015-4750"], "type": "nessus", "lastseen": "2019-02-21T01:24:37", "history": [{"bulletin": {"bulletinFamily": "scanner", "cpe": ["cpe:/o:oracle:solaris"], "cvelist": ["CVE-2015-4750"], "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "description": "The remote Solaris system is missing necessary patches to address an unspecified flaw that exists in the LDOM Manager subcomponent of Oracle VM Server for SPARC. A remote, unauthenticated attacker can exploit this, via multiple protocols, to cause a denial of service condition.", "edition": 2, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}}, "hash": "e43cbc6a844ca21edf0a5f3a544de874d6014f7e6e7416326c2a2aa1a13e660d", "hashmap": [{"hash": "8b3f22c12e7d0ac5973f1221c6985559", "key": "description"}, {"hash": "9bf01e7abdf2da412722cc5504130f10", "key": "pluginID"}, {"hash": "7cfde9f441fe43eca57e56573afc93ac", "key": "cvelist"}, {"hash": "be2073bfad5e624acf0f878f09eda795", "key": "naslFamily"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "4aee032d8a0b05643ff6a8bac01d8bee", "key": "references"}, {"hash": "de319416760c299b38c49d838b768a08", "key": "cpe"}, {"hash": "1b84187bfac0cb7ad1f5081f0f4a50f6", "key": "title"}, {"hash": "92203387983b839d0030cbafd24b6f2e", "key": "sourceData"}, {"hash": "92c5ff28febf7c9e8510ebcf15c72ab1", "key": "modified"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "f63063fc0ba422138769da6bcd81bbda", "key": "published"}, {"hash": "84813b1457b92d6ba1174abffbb83a2f", "key": "cvss"}, {"hash": "08a7f2d0f47da042b43488ced8ce690a", "key": "href"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=84807", "id": "SOLARIS11_LDOMS_20150714.NASL", "lastseen": "2017-10-29T13:44:49", "modified": "2015-10-24T00:00:00", "naslFamily": "Solaris Local Security Checks", "objectVersion": "1.3", "pluginID": "84807", "published": "2015-07-16T00:00:00", "references": ["https://support.oracle.com/rs?type=doc&id=2018633.1", "http://www.nessus.org/u?d18c2a85", "http://www.nessus.org/u?591ab328", "https://support.oracle.com/rs?type=doc&id=20018633.1"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from the Oracle CPU for jul2015.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(84807);\n script_version(\"$Revision: 1.5 $\");\n script_cvs_date(\"$Date: 2015/10/24 14:57:04 $\");\n\n script_cve_id(\"CVE-2015-4750\");\n script_bugtraq_id(75862);\n script_osvdb_id(124718);\n\n script_name(english:\"Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)\");\n script_summary(english:\"Check for the jul2015 CPU and ldoms.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Solaris system is missing a security patch from the July\n2015 Oracle Critical Patch Update advisory.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Solaris system is missing necessary patches to address\nan unspecified flaw that exists in the LDOM Manager subcomponent of\nOracle VM Server for SPARC. A remote, unauthenticated attacker can\nexploit this, via multiple protocols, to cause a denial of service\ncondition.\");\n # http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/2368792.xml\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?591ab328\");\n # http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?d18c2a85\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=20018633.1\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=2018633.1\");\n script_set_attribute(attribute:\"solution\", value:\n\"Apply the appropriate patch according to the July 2015 Oracle\nCritical Patch Update advisory.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:ND/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:solaris\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/07/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015 Tenable Network Security, Inc.\");\n script_family(english:\"Solaris Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Solaris11/release\", \"Host/Solaris11/pkg-list\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"solaris.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Solaris11/release\");\nif (isnull(release)) audit(AUDIT_OS_NOT, \"Solaris11\");\n\npkg_list = solaris_pkg_list_leaves();\nif (isnull (pkg_list)) audit(AUDIT_PACKAGE_LIST_MISSING, \"Solaris pkg-list packages\");\n\nif (empty_or_null(egrep(string:pkg_list, pattern:\"^ldoms$\"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ldoms\");\n\nfix_release = \"0.5.11-0.175.2.11.0.5.0\";\n\nflag = 0;\n\nif (solaris_check_release(release:fix_release, sru:\"11.2.11.5.0\") > 0) flag++;\n\nif (flag)\n{\n error_extra = 'Affected package : ldoms\\n' + solaris_get_report2();\n error_extra = ereg_replace(pattern:\"version\", replace:\"OS version\", string:error_extra);\n if (report_verbosity > 0) security_warning(port:0, extra:error_extra);\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_PACKAGE_NOT_AFFECTED, \"ldoms\");\n", "title": "Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)", "type": "nessus", "viewCount": 13}, "differentElements": ["modified", "sourceData"], "edition": 2, "lastseen": "2017-10-29T13:44:49"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": ["cpe:/o:oracle:solaris"], "cvelist": ["CVE-2015-4750"], "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "description": "The remote Solaris system is missing necessary patches to address\nan unspecified flaw that exists in the LDOM Manager subcomponent of\nOracle VM Server for SPARC. A remote, unauthenticated attacker can\nexploit this, via multiple protocols, to cause a denial of service\ncondition.", "edition": 7, "enchantments": {"dependencies": {"modified": "2019-01-16T20:22:00", "references": [{"idList": ["CVE-2015-4750"], "type": "cve"}, {"idList": ["ORACLE:CPUJUL2015-2367936"], "type": "oracle"}, {"idList": ["SECURITYVULNS:VULN:14601"], "type": "securityvulns"}, {"idList": ["SOLARIS10_151934.NASL"], "type": "nessus"}]}, "score": {"value": 5.0, "vector": "NONE"}}, "hash": "9ccaf1b229763f008cc28dc7e63cd4a3da67d7ee5dbeef8bdff4f48f3144940e", "hashmap": [{"hash": "9bf01e7abdf2da412722cc5504130f10", "key": "pluginID"}, {"hash": "7cfde9f441fe43eca57e56573afc93ac", "key": "cvelist"}, {"hash": "5110fdb952f0e70e3ea83acb2a2fd54c", "key": "description"}, {"hash": "be2073bfad5e624acf0f878f09eda795", "key": "naslFamily"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "de319416760c299b38c49d838b768a08", "key": "cpe"}, {"hash": "015cb78ce50d3bd4e2fbe18f25603329", "key": "modified"}, {"hash": "1b84187bfac0cb7ad1f5081f0f4a50f6", "key": "title"}, {"hash": "d4a8398329246b7bdd62b05b59332690", "key": "sourceData"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "f63063fc0ba422138769da6bcd81bbda", "key": "published"}, {"hash": "84813b1457b92d6ba1174abffbb83a2f", "key": "cvss"}, {"hash": "af93846735a516dd93a0e2a43a081eb7", "key": "references"}, {"hash": "08a7f2d0f47da042b43488ced8ce690a", "key": "href"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=84807", "id": "SOLARIS11_LDOMS_20150714.NASL", "lastseen": "2019-01-16T20:22:00", "modified": "2018-11-15T00:00:00", "naslFamily": "Solaris Local Security Checks", "objectVersion": "1.3", "pluginID": "84807", "published": "2015-07-16T00:00:00", "references": ["https://support.oracle.com/rs?type=doc&id=2018633.1", "http://www.nessus.org/u?178c8ed1", "http://www.nessus.org/u?d18c2a85", "https://support.oracle.com/rs?type=doc&id=20018633.1"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from the Oracle CPU for jul2015.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(84807);\n script_version(\"1.7\");\n script_cvs_date(\"Date: 2018/11/15 20:50:25\");\n\n script_cve_id(\"CVE-2015-4750\");\n script_bugtraq_id(75862);\n\n script_name(english:\"Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)\");\n script_summary(english:\"Check for the jul2015 CPU and ldoms.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Solaris system is missing a security patch from the July\n2015 Oracle Critical Patch Update advisory.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Solaris system is missing necessary patches to address\nan unspecified flaw that exists in the LDOM Manager subcomponent of\nOracle VM Server for SPARC. A remote, unauthenticated attacker can\nexploit this, via multiple protocols, to cause a denial of service\ncondition.\");\n # https://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/2368792.xml\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?178c8ed1\");\n # http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?d18c2a85\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=20018633.1\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=2018633.1\");\n script_set_attribute(attribute:\"solution\", value:\n\"Apply the appropriate patch according to the July 2015 Oracle\nCritical Patch Update advisory.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:solaris\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/07/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Solaris Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Solaris11/release\", \"Host/Solaris11/pkg-list\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"solaris.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Solaris11/release\");\nif (isnull(release)) audit(AUDIT_OS_NOT, \"Solaris11\");\n\npkg_list = solaris_pkg_list_leaves();\nif (isnull (pkg_list)) audit(AUDIT_PACKAGE_LIST_MISSING, \"Solaris pkg-list packages\");\n\nif (empty_or_null(egrep(string:pkg_list, pattern:\"^ldoms$\"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ldoms\");\n\nfix_release = \"0.5.11-0.175.2.11.0.5.0\";\n\nflag = 0;\n\nif (solaris_check_release(release:fix_release, sru:\"11.2.11.5.0\") > 0) flag++;\n\nif (flag)\n{\n error_extra = 'Affected package : ldoms\\n' + solaris_get_report2();\n error_extra = ereg_replace(pattern:\"version\", replace:\"OS version\", string:error_extra);\n if (report_verbosity > 0) security_warning(port:0, extra:error_extra);\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_PACKAGE_NOT_AFFECTED, \"ldoms\");\n", "title": "Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)", "type": "nessus", "viewCount": 21}, "differentElements": ["description"], "edition": 7, "lastseen": "2019-01-16T20:22:00"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": ["cpe:/o:oracle:solaris"], "cvelist": ["CVE-2015-4750"], "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "description": "The remote Solaris system is missing necessary patches to address an unspecified flaw that exists in the LDOM Manager subcomponent of Oracle VM Server for SPARC. A remote, unauthenticated attacker can exploit this, via multiple protocols, to cause a denial of service condition.", "edition": 3, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}}, "hash": "155fc8d42a6503fe87a924ceffd27269187e464bc99e85223efae3b8046771e0", "hashmap": [{"hash": "8b3f22c12e7d0ac5973f1221c6985559", "key": "description"}, {"hash": "9bf01e7abdf2da412722cc5504130f10", "key": "pluginID"}, {"hash": "7cfde9f441fe43eca57e56573afc93ac", "key": "cvelist"}, {"hash": "be2073bfad5e624acf0f878f09eda795", "key": "naslFamily"}, {"hash": "3b33040e1ee70c0673ab567f99a67d3f", "key": "modified"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "2a99e20fe2d864c08307910f800c89ef", "key": "sourceData"}, {"hash": "4aee032d8a0b05643ff6a8bac01d8bee", "key": "references"}, {"hash": "de319416760c299b38c49d838b768a08", "key": "cpe"}, {"hash": "1b84187bfac0cb7ad1f5081f0f4a50f6", "key": "title"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "f63063fc0ba422138769da6bcd81bbda", "key": "published"}, {"hash": "84813b1457b92d6ba1174abffbb83a2f", "key": "cvss"}, {"hash": "08a7f2d0f47da042b43488ced8ce690a", "key": "href"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=84807", "id": "SOLARIS11_LDOMS_20150714.NASL", "lastseen": "2018-07-31T10:22:47", "modified": "2018-07-30T00:00:00", "naslFamily": "Solaris Local Security Checks", "objectVersion": "1.3", "pluginID": "84807", "published": "2015-07-16T00:00:00", "references": ["https://support.oracle.com/rs?type=doc&id=2018633.1", "http://www.nessus.org/u?d18c2a85", "http://www.nessus.org/u?591ab328", "https://support.oracle.com/rs?type=doc&id=20018633.1"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from the Oracle CPU for jul2015.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(84807);\n script_version(\"1.6\");\n script_cvs_date(\"Date: 2018/07/30 15:31:32\");\n\n script_cve_id(\"CVE-2015-4750\");\n script_bugtraq_id(75862);\n\n script_name(english:\"Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)\");\n script_summary(english:\"Check for the jul2015 CPU and ldoms.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Solaris system is missing a security patch from the July\n2015 Oracle Critical Patch Update advisory.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Solaris system is missing necessary patches to address\nan unspecified flaw that exists in the LDOM Manager subcomponent of\nOracle VM Server for SPARC. A remote, unauthenticated attacker can\nexploit this, via multiple protocols, to cause a denial of service\ncondition.\");\n # http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/2368792.xml\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?591ab328\");\n # http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?d18c2a85\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=20018633.1\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=2018633.1\");\n script_set_attribute(attribute:\"solution\", value:\n\"Apply the appropriate patch according to the July 2015 Oracle\nCritical Patch Update advisory.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:solaris\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/07/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Solaris Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Solaris11/release\", \"Host/Solaris11/pkg-list\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"solaris.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Solaris11/release\");\nif (isnull(release)) audit(AUDIT_OS_NOT, \"Solaris11\");\n\npkg_list = solaris_pkg_list_leaves();\nif (isnull (pkg_list)) audit(AUDIT_PACKAGE_LIST_MISSING, \"Solaris pkg-list packages\");\n\nif (empty_or_null(egrep(string:pkg_list, pattern:\"^ldoms$\"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ldoms\");\n\nfix_release = \"0.5.11-0.175.2.11.0.5.0\";\n\nflag = 0;\n\nif (solaris_check_release(release:fix_release, sru:\"11.2.11.5.0\") > 0) flag++;\n\nif (flag)\n{\n error_extra = 'Affected package : ldoms\\n' + solaris_get_report2();\n error_extra = ereg_replace(pattern:\"version\", replace:\"OS version\", string:error_extra);\n if (report_verbosity > 0) security_warning(port:0, extra:error_extra);\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_PACKAGE_NOT_AFFECTED, \"ldoms\");\n", "title": "Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)", "type": "nessus", "viewCount": 13}, "differentElements": ["cvss"], "edition": 3, "lastseen": "2018-07-31T10:22:47"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": ["cpe:/o:oracle:solaris"], "cvelist": ["CVE-2015-4750"], "cvss": {"score": 0.0, "vector": "NONE"}, "description": "The remote Solaris system is missing necessary patches to address an unspecified flaw that exists in the LDOM Manager subcomponent of Oracle VM Server for SPARC. A remote, unauthenticated attacker can exploit this, via multiple protocols, to cause a denial of service condition.", "edition": 4, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}}, "hash": "fcb1d42da3146dd20ebdccebc2b64ce7171e2d8adf105fec7723b0832c27da70", "hashmap": [{"hash": "8b3f22c12e7d0ac5973f1221c6985559", "key": "description"}, {"hash": "9bf01e7abdf2da412722cc5504130f10", "key": "pluginID"}, {"hash": "7cfde9f441fe43eca57e56573afc93ac", "key": "cvelist"}, {"hash": "be2073bfad5e624acf0f878f09eda795", "key": "naslFamily"}, {"hash": "3b33040e1ee70c0673ab567f99a67d3f", "key": "modified"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "2a99e20fe2d864c08307910f800c89ef", "key": "sourceData"}, {"hash": "4aee032d8a0b05643ff6a8bac01d8bee", "key": "references"}, {"hash": "de319416760c299b38c49d838b768a08", "key": "cpe"}, {"hash": "1b84187bfac0cb7ad1f5081f0f4a50f6", "key": "title"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "f63063fc0ba422138769da6bcd81bbda", "key": "published"}, {"hash": "08a7f2d0f47da042b43488ced8ce690a", "key": "href"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=84807", "id": "SOLARIS11_LDOMS_20150714.NASL", "lastseen": "2018-08-30T19:56:17", "modified": "2018-07-30T00:00:00", "naslFamily": "Solaris Local Security Checks", "objectVersion": "1.3", "pluginID": "84807", "published": "2015-07-16T00:00:00", "references": ["https://support.oracle.com/rs?type=doc&id=2018633.1", "http://www.nessus.org/u?d18c2a85", "http://www.nessus.org/u?591ab328", "https://support.oracle.com/rs?type=doc&id=20018633.1"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from the Oracle CPU for jul2015.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(84807);\n script_version(\"1.6\");\n script_cvs_date(\"Date: 2018/07/30 15:31:32\");\n\n script_cve_id(\"CVE-2015-4750\");\n script_bugtraq_id(75862);\n\n script_name(english:\"Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)\");\n script_summary(english:\"Check for the jul2015 CPU and ldoms.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Solaris system is missing a security patch from the July\n2015 Oracle Critical Patch Update advisory.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Solaris system is missing necessary patches to address\nan unspecified flaw that exists in the LDOM Manager subcomponent of\nOracle VM Server for SPARC. A remote, unauthenticated attacker can\nexploit this, via multiple protocols, to cause a denial of service\ncondition.\");\n # http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/2368792.xml\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?591ab328\");\n # http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?d18c2a85\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=20018633.1\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=2018633.1\");\n script_set_attribute(attribute:\"solution\", value:\n\"Apply the appropriate patch according to the July 2015 Oracle\nCritical Patch Update advisory.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:solaris\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/07/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Solaris Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Solaris11/release\", \"Host/Solaris11/pkg-list\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"solaris.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Solaris11/release\");\nif (isnull(release)) audit(AUDIT_OS_NOT, \"Solaris11\");\n\npkg_list = solaris_pkg_list_leaves();\nif (isnull (pkg_list)) audit(AUDIT_PACKAGE_LIST_MISSING, \"Solaris pkg-list packages\");\n\nif (empty_or_null(egrep(string:pkg_list, pattern:\"^ldoms$\"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ldoms\");\n\nfix_release = \"0.5.11-0.175.2.11.0.5.0\";\n\nflag = 0;\n\nif (solaris_check_release(release:fix_release, sru:\"11.2.11.5.0\") > 0) flag++;\n\nif (flag)\n{\n error_extra = 'Affected package : ldoms\\n' + solaris_get_report2();\n error_extra = ereg_replace(pattern:\"version\", replace:\"OS version\", string:error_extra);\n if (report_verbosity > 0) security_warning(port:0, extra:error_extra);\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_PACKAGE_NOT_AFFECTED, \"ldoms\");\n", "title": "Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)", "type": "nessus", "viewCount": 13}, "differentElements": ["cvss"], "edition": 4, "lastseen": "2018-08-30T19:56:17"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": ["cpe:/o:oracle:solaris"], "cvelist": ["CVE-2015-4750"], "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "description": "The remote Solaris system is missing necessary patches to address an unspecified flaw that exists in the LDOM Manager subcomponent of Oracle VM Server for SPARC. A remote, unauthenticated attacker can exploit this, via multiple protocols, to cause a denial of service condition.", "edition": 6, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}}, "hash": "076d1445d53fafc7d3332bbeadbfc579360cb68a3f6ff8e1c7944983fe2ca56f", "hashmap": [{"hash": "8b3f22c12e7d0ac5973f1221c6985559", "key": "description"}, {"hash": "9bf01e7abdf2da412722cc5504130f10", "key": "pluginID"}, {"hash": "7cfde9f441fe43eca57e56573afc93ac", "key": "cvelist"}, {"hash": "be2073bfad5e624acf0f878f09eda795", "key": "naslFamily"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "de319416760c299b38c49d838b768a08", "key": "cpe"}, {"hash": "015cb78ce50d3bd4e2fbe18f25603329", "key": "modified"}, {"hash": "1b84187bfac0cb7ad1f5081f0f4a50f6", "key": "title"}, {"hash": "d4a8398329246b7bdd62b05b59332690", "key": "sourceData"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "f63063fc0ba422138769da6bcd81bbda", "key": "published"}, {"hash": "84813b1457b92d6ba1174abffbb83a2f", "key": "cvss"}, {"hash": "af93846735a516dd93a0e2a43a081eb7", "key": "references"}, {"hash": "08a7f2d0f47da042b43488ced8ce690a", "key": "href"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=84807", "id": "SOLARIS11_LDOMS_20150714.NASL", "lastseen": "2018-11-17T03:14:47", "modified": "2018-11-15T00:00:00", "naslFamily": "Solaris Local Security Checks", "objectVersion": "1.3", "pluginID": "84807", "published": "2015-07-16T00:00:00", "references": ["https://support.oracle.com/rs?type=doc&id=2018633.1", "http://www.nessus.org/u?178c8ed1", "http://www.nessus.org/u?d18c2a85", "https://support.oracle.com/rs?type=doc&id=20018633.1"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from the Oracle CPU for jul2015.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(84807);\n script_version(\"1.7\");\n script_cvs_date(\"Date: 2018/11/15 20:50:25\");\n\n script_cve_id(\"CVE-2015-4750\");\n script_bugtraq_id(75862);\n\n script_name(english:\"Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)\");\n script_summary(english:\"Check for the jul2015 CPU and ldoms.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Solaris system is missing a security patch from the July\n2015 Oracle Critical Patch Update advisory.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Solaris system is missing necessary patches to address\nan unspecified flaw that exists in the LDOM Manager subcomponent of\nOracle VM Server for SPARC. A remote, unauthenticated attacker can\nexploit this, via multiple protocols, to cause a denial of service\ncondition.\");\n # https://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/2368792.xml\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?178c8ed1\");\n # http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?d18c2a85\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=20018633.1\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=2018633.1\");\n script_set_attribute(attribute:\"solution\", value:\n\"Apply the appropriate patch according to the July 2015 Oracle\nCritical Patch Update advisory.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:solaris\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/07/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Solaris Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Solaris11/release\", \"Host/Solaris11/pkg-list\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"solaris.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Solaris11/release\");\nif (isnull(release)) audit(AUDIT_OS_NOT, \"Solaris11\");\n\npkg_list = solaris_pkg_list_leaves();\nif (isnull (pkg_list)) audit(AUDIT_PACKAGE_LIST_MISSING, \"Solaris pkg-list packages\");\n\nif (empty_or_null(egrep(string:pkg_list, pattern:\"^ldoms$\"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ldoms\");\n\nfix_release = \"0.5.11-0.175.2.11.0.5.0\";\n\nflag = 0;\n\nif (solaris_check_release(release:fix_release, sru:\"11.2.11.5.0\") > 0) flag++;\n\nif (flag)\n{\n error_extra = 'Affected package : ldoms\\n' + solaris_get_report2();\n error_extra = ereg_replace(pattern:\"version\", replace:\"OS version\", string:error_extra);\n if (report_verbosity > 0) security_warning(port:0, extra:error_extra);\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_PACKAGE_NOT_AFFECTED, \"ldoms\");\n", "title": "Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)", "type": "nessus", "viewCount": 19}, "differentElements": ["description"], "edition": 6, "lastseen": "2018-11-17T03:14:47"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": ["cpe:/o:oracle:solaris"], "cvelist": ["CVE-2015-4750"], "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "description": "The remote Solaris system is missing necessary patches to address an unspecified flaw that exists in the LDOM Manager subcomponent of Oracle VM Server for SPARC. A remote, unauthenticated attacker can exploit this, via multiple protocols, to cause a denial of service condition.", "edition": 5, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}}, "hash": "155fc8d42a6503fe87a924ceffd27269187e464bc99e85223efae3b8046771e0", "hashmap": [{"hash": "8b3f22c12e7d0ac5973f1221c6985559", "key": "description"}, {"hash": "9bf01e7abdf2da412722cc5504130f10", "key": "pluginID"}, {"hash": "7cfde9f441fe43eca57e56573afc93ac", "key": "cvelist"}, {"hash": "be2073bfad5e624acf0f878f09eda795", "key": "naslFamily"}, {"hash": "3b33040e1ee70c0673ab567f99a67d3f", "key": "modified"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "2a99e20fe2d864c08307910f800c89ef", "key": "sourceData"}, {"hash": "4aee032d8a0b05643ff6a8bac01d8bee", "key": "references"}, {"hash": "de319416760c299b38c49d838b768a08", "key": "cpe"}, {"hash": "1b84187bfac0cb7ad1f5081f0f4a50f6", "key": "title"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "f63063fc0ba422138769da6bcd81bbda", "key": "published"}, {"hash": "84813b1457b92d6ba1174abffbb83a2f", "key": "cvss"}, {"hash": "08a7f2d0f47da042b43488ced8ce690a", "key": "href"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=84807", "id": "SOLARIS11_LDOMS_20150714.NASL", "lastseen": "2018-09-02T00:07:29", "modified": "2018-07-30T00:00:00", "naslFamily": "Solaris Local Security Checks", "objectVersion": "1.3", "pluginID": "84807", "published": "2015-07-16T00:00:00", "references": ["https://support.oracle.com/rs?type=doc&id=2018633.1", "http://www.nessus.org/u?d18c2a85", "http://www.nessus.org/u?591ab328", "https://support.oracle.com/rs?type=doc&id=20018633.1"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from the Oracle CPU for jul2015.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(84807);\n script_version(\"1.6\");\n script_cvs_date(\"Date: 2018/07/30 15:31:32\");\n\n script_cve_id(\"CVE-2015-4750\");\n script_bugtraq_id(75862);\n\n script_name(english:\"Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)\");\n script_summary(english:\"Check for the jul2015 CPU and ldoms.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Solaris system is missing a security patch from the July\n2015 Oracle Critical Patch Update advisory.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Solaris system is missing necessary patches to address\nan unspecified flaw that exists in the LDOM Manager subcomponent of\nOracle VM Server for SPARC. A remote, unauthenticated attacker can\nexploit this, via multiple protocols, to cause a denial of service\ncondition.\");\n # http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/2368792.xml\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?591ab328\");\n # http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?d18c2a85\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=20018633.1\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=2018633.1\");\n script_set_attribute(attribute:\"solution\", value:\n\"Apply the appropriate patch according to the July 2015 Oracle\nCritical Patch Update advisory.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:solaris\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/07/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Solaris Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Solaris11/release\", \"Host/Solaris11/pkg-list\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"solaris.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Solaris11/release\");\nif (isnull(release)) audit(AUDIT_OS_NOT, \"Solaris11\");\n\npkg_list = solaris_pkg_list_leaves();\nif (isnull (pkg_list)) audit(AUDIT_PACKAGE_LIST_MISSING, \"Solaris pkg-list packages\");\n\nif (empty_or_null(egrep(string:pkg_list, pattern:\"^ldoms$\"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ldoms\");\n\nfix_release = \"0.5.11-0.175.2.11.0.5.0\";\n\nflag = 0;\n\nif (solaris_check_release(release:fix_release, sru:\"11.2.11.5.0\") > 0) flag++;\n\nif (flag)\n{\n error_extra = 'Affected package : ldoms\\n' + solaris_get_report2();\n error_extra = ereg_replace(pattern:\"version\", replace:\"OS version\", string:error_extra);\n if (report_verbosity > 0) security_warning(port:0, extra:error_extra);\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_PACKAGE_NOT_AFFECTED, \"ldoms\");\n", "title": "Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)", "type": "nessus", "viewCount": 18}, "differentElements": ["references", "modified", "sourceData"], "edition": 5, "lastseen": "2018-09-02T00:07:29"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": [], "cvelist": ["CVE-2015-4750"], "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "description": "The remote Solaris system is missing necessary patches to address an unspecified flaw that exists in the LDOM Manager subcomponent of Oracle VM Server for SPARC. A remote, unauthenticated attacker can exploit this, via multiple protocols, to cause a denial of service condition.", "edition": 1, "enchantments": {}, "hash": "a3ce037f6757b618c17d7dfc1803d095570022e0f57e70e4f34b07f2d4027e97", "hashmap": [{"hash": "8b3f22c12e7d0ac5973f1221c6985559", "key": "description"}, {"hash": "9bf01e7abdf2da412722cc5504130f10", "key": "pluginID"}, {"hash": "7cfde9f441fe43eca57e56573afc93ac", "key": "cvelist"}, {"hash": "be2073bfad5e624acf0f878f09eda795", "key": "naslFamily"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "4aee032d8a0b05643ff6a8bac01d8bee", "key": "references"}, {"hash": "1b84187bfac0cb7ad1f5081f0f4a50f6", "key": "title"}, {"hash": "92203387983b839d0030cbafd24b6f2e", "key": "sourceData"}, {"hash": "92c5ff28febf7c9e8510ebcf15c72ab1", "key": "modified"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "f63063fc0ba422138769da6bcd81bbda", "key": "published"}, {"hash": "84813b1457b92d6ba1174abffbb83a2f", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}, {"hash": "08a7f2d0f47da042b43488ced8ce690a", "key": "href"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=84807", "id": "SOLARIS11_LDOMS_20150714.NASL", "lastseen": "2016-09-26T17:26:27", "modified": "2015-10-24T00:00:00", "naslFamily": "Solaris Local Security Checks", "objectVersion": "1.2", "pluginID": "84807", "published": "2015-07-16T00:00:00", "references": ["https://support.oracle.com/rs?type=doc&id=2018633.1", "http://www.nessus.org/u?d18c2a85", "http://www.nessus.org/u?591ab328", "https://support.oracle.com/rs?type=doc&id=20018633.1"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from the Oracle CPU for jul2015.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(84807);\n script_version(\"$Revision: 1.5 $\");\n script_cvs_date(\"$Date: 2015/10/24 14:57:04 $\");\n\n script_cve_id(\"CVE-2015-4750\");\n script_bugtraq_id(75862);\n script_osvdb_id(124718);\n\n script_name(english:\"Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)\");\n script_summary(english:\"Check for the jul2015 CPU and ldoms.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Solaris system is missing a security patch from the July\n2015 Oracle Critical Patch Update advisory.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Solaris system is missing necessary patches to address\nan unspecified flaw that exists in the LDOM Manager subcomponent of\nOracle VM Server for SPARC. A remote, unauthenticated attacker can\nexploit this, via multiple protocols, to cause a denial of service\ncondition.\");\n # http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/2368792.xml\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?591ab328\");\n # http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?d18c2a85\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=20018633.1\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=2018633.1\");\n script_set_attribute(attribute:\"solution\", value:\n\"Apply the appropriate patch according to the July 2015 Oracle\nCritical Patch Update advisory.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:ND/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:solaris\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/07/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015 Tenable Network Security, Inc.\");\n script_family(english:\"Solaris Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Solaris11/release\", \"Host/Solaris11/pkg-list\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"solaris.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Solaris11/release\");\nif (isnull(release)) audit(AUDIT_OS_NOT, \"Solaris11\");\n\npkg_list = solaris_pkg_list_leaves();\nif (isnull (pkg_list)) audit(AUDIT_PACKAGE_LIST_MISSING, \"Solaris pkg-list packages\");\n\nif (empty_or_null(egrep(string:pkg_list, pattern:\"^ldoms$\"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ldoms\");\n\nfix_release = \"0.5.11-0.175.2.11.0.5.0\";\n\nflag = 0;\n\nif (solaris_check_release(release:fix_release, sru:\"11.2.11.5.0\") > 0) flag++;\n\nif (flag)\n{\n error_extra = 'Affected package : ldoms\\n' + solaris_get_report2();\n error_extra = ereg_replace(pattern:\"version\", replace:\"OS version\", string:error_extra);\n if (report_verbosity > 0) security_warning(port:0, extra:error_extra);\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_PACKAGE_NOT_AFFECTED, \"ldoms\");\n", "title": "Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)", "type": "nessus", "viewCount": 5}, "differentElements": ["cpe"], "edition": 1, "lastseen": "2016-09-26T17:26:27"}], "edition": 8, "hashmap": [{"key": "bulletinFamily", "hash": "bbdaea376f500d25f6b0c1050311dd07"}, {"key": "cpe", "hash": "de319416760c299b38c49d838b768a08"}, {"key": "cvelist", "hash": "7cfde9f441fe43eca57e56573afc93ac"}, {"key": "cvss", "hash": "84813b1457b92d6ba1174abffbb83a2f"}, {"key": "description", "hash": "8b3f22c12e7d0ac5973f1221c6985559"}, {"key": "href", "hash": "08a7f2d0f47da042b43488ced8ce690a"}, {"key": "modified", "hash": "015cb78ce50d3bd4e2fbe18f25603329"}, {"key": "naslFamily", "hash": "be2073bfad5e624acf0f878f09eda795"}, {"key": "pluginID", "hash": "9bf01e7abdf2da412722cc5504130f10"}, {"key": "published", "hash": "f63063fc0ba422138769da6bcd81bbda"}, {"key": "references", "hash": "af93846735a516dd93a0e2a43a081eb7"}, {"key": "reporter", "hash": "9cf00d658b687f030ebe173a0528c567"}, {"key": "sourceData", "hash": "d4a8398329246b7bdd62b05b59332690"}, {"key": "title", "hash": "1b84187bfac0cb7ad1f5081f0f4a50f6"}, {"key": "type", "hash": "5e0bd03bec244039678f2b955a2595aa"}], "hash": "076d1445d53fafc7d3332bbeadbfc579360cb68a3f6ff8e1c7944983fe2ca56f", "viewCount": 24, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2015-4750"]}, {"type": "nessus", "idList": ["SOLARIS10_151934.NASL"]}, {"type": "oracle", "idList": ["ORACLE:CPUJUL2015-2367936"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:14601"]}], "modified": "2019-02-21T01:24:37"}, "score": {"value": 5.0, "vector": "NONE"}, "vulnersScore": 5.0}, "objectVersion": "1.3", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from the Oracle CPU for jul2015.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(84807);\n script_version(\"1.7\");\n script_cvs_date(\"Date: 2018/11/15 20:50:25\");\n\n script_cve_id(\"CVE-2015-4750\");\n script_bugtraq_id(75862);\n\n script_name(english:\"Oracle Solaris Critical Patch Update : ldoms (SRU11_2_11_5_0)\");\n script_summary(english:\"Check for the jul2015 CPU and ldoms.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Solaris system is missing a security patch from the July\n2015 Oracle Critical Patch Update advisory.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Solaris system is missing necessary patches to address\nan unspecified flaw that exists in the LDOM Manager subcomponent of\nOracle VM Server for SPARC. A remote, unauthenticated attacker can\nexploit this, via multiple protocols, to cause a denial of service\ncondition.\");\n # https://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/2368792.xml\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?178c8ed1\");\n # http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?d18c2a85\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=20018633.1\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.oracle.com/rs?type=doc&id=2018633.1\");\n script_set_attribute(attribute:\"solution\", value:\n\"Apply the appropriate patch according to the July 2015 Oracle\nCritical Patch Update advisory.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:solaris\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/07/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Solaris Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Solaris11/release\", \"Host/Solaris11/pkg-list\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"solaris.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Solaris11/release\");\nif (isnull(release)) audit(AUDIT_OS_NOT, \"Solaris11\");\n\npkg_list = solaris_pkg_list_leaves();\nif (isnull (pkg_list)) audit(AUDIT_PACKAGE_LIST_MISSING, \"Solaris pkg-list packages\");\n\nif (empty_or_null(egrep(string:pkg_list, pattern:\"^ldoms$\"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ldoms\");\n\nfix_release = \"0.5.11-0.175.2.11.0.5.0\";\n\nflag = 0;\n\nif (solaris_check_release(release:fix_release, sru:\"11.2.11.5.0\") > 0) flag++;\n\nif (flag)\n{\n error_extra = 'Affected package : ldoms\\n' + solaris_get_report2();\n error_extra = ereg_replace(pattern:\"version\", replace:\"OS version\", string:error_extra);\n if (report_verbosity > 0) security_warning(port:0, extra:error_extra);\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_PACKAGE_NOT_AFFECTED, \"ldoms\");\n", "naslFamily": "Solaris Local Security Checks", "pluginID": "84807", "cpe": ["cpe:/o:oracle:solaris"], "scheme": null}

{"cve": [{"lastseen": "2017-04-18T15:57:18", "bulletinFamily": "NVD", "description": "Unspecified vulnerability in the Oracle VM Server for SPARC component in Oracle Sun Systems Products Suite 3.2 allows remote attackers to affect availability via vectors related to LDOM Manager.", "modified": "2016-12-29T08:34:58", "published": "2015-07-16T07:00:44", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4750", "id": "CVE-2015-4750", "title": "CVE-2015-4750", "type": "cve", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}}], "nessus": [{"lastseen": "2019-02-21T01:24:21", "bulletinFamily": "scanner", "description": "VM Server for SPARC 3.2 ldmd patch.\nDate this patch was last updated by Sun : Dec/02/17\n\nThis plugin has been deprecated and either replaced with individual 151934 patch-revision plugins, or deemed non-security related.", "modified": "2018-07-30T00:00:00", "id": "SOLARIS10_151934.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=84205", "published": "2015-06-16T00:00:00", "title": "Solaris 10 (sparc) : 151934-04 (deprecated)", "type": "nessus", "sourceData": "\n#\n# (C) Tenable Network Security, Inc.\n#\n# @DEPRECATED@\n#\n# Disabled on 2018/03/12. Deprecated and either replaced by\n# individual patch-revision plugins, or has been deemed a\n# non-security advisory.\n#\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(84205);\n script_version(\"2.13\");\n script_cvs_date(\"Date: 2018/07/30 13:40:15\");\n\n script_cve_id(\"CVE-2015-4750\");\n\n script_name(english:\"Solaris 10 (sparc) : 151934-04 (deprecated)\");\n script_summary(english:\"Check for patch 151934-04\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"This plugin has been deprecated.\"\n );\n script_set_attribute(\n attribute:\"description\",\n value:\n\"VM Server for SPARC 3.2 ldmd patch.\nDate this patch was last updated by Sun : Dec/02/17\n\nThis plugin has been deprecated and either replaced with individual\n151934 patch-revision plugins, or deemed non-security related.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://getupdates.oracle.com/readme/151934-04\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"n/a\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:sun:solaris\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/12/02\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/06/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Solaris Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Solaris/showrev\");\n\n exit(0);\n}\n\nexit(0, \"This plugin has been deprecated. Consult specific patch-revision plugins for patch 151934 instead.\");\n", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}}], "securityvulns": [{"lastseen": "2018-08-31T11:10:01", "bulletinFamily": "software", "description": "Quarterly CPU fixed over 170 different vulnerabilities.", "modified": "2015-07-20T00:00:00", "published": "2015-07-20T00:00:00", "id": "SECURITYVULNS:VULN:14601", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14601", "title": "Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities", "type": "securityvulns", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "oracle": [{"lastseen": "2018-08-31T04:14:03", "bulletinFamily": "software", "description": "A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should be reviewed for information regarding earlier published security fixes. Please refer to:\n\n \n\n\n[Critical Patch Updates and Security Alerts](<http://www.oracle.com/technetwork/topics/security/alerts-086861.html>) for information about Oracle Security Advisories.\n\n \n\n\n**Oracle continues to periodically receive reports of malicious exploitation of vulnerabilities for which Oracle has already released fixes. In some instances, it has been reported that malicious attackers have been successful because customers had failed to apply available Oracle patches. Oracle therefore _strongly_ recommends that customers remain on actively-supported versions and apply Critical Patch Update fixes _without_ delay.**\n\n \n\n\nThis Critical Patch Update contains 193 new security fixes across the product families listed below. Please note that a blog entry summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at <https://blogs.oracle.com/security>.\n\n \n\n\n** Please note that on May 15, 2015, Oracle released [Security Alert for CVE-2015-3456 (QEMU \"Venom\")](<http://www.oracle.com/technetwork/topics/security/alert-cve-2015-3456-2542656.html>). Customers of affected Oracle products are strongly advised to apply the fixes and/or configuration steps that were announced for CVE-2015-3456. **\n\n \n\n\nThis Critical Patch Update advisory is also available in an XML format that conforms to the Common Vulnerability Reporting Format (CVRF) version 1.1. More information about Oracle's use of CVRF is available at: <http://www.oracle.com/technetwork/topics/security/cpufaq-098434.html#CVRF>.\n\n \n\n", "modified": "2016-07-07T00:00:00", "published": "2015-07-14T00:00:00", "id": "ORACLE:CPUJUL2015-2367936", "href": "", "title": "Oracle Critical Patch Update - July 2015", "type": "oracle", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}]}