RHEL 6 : luci (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - plone: Header injection CVE-2015-7318 - Cross-site scripting XSS vulnerability in ZMI pages that use the...

RHEL 5 : luci (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - plone: Header injection CVE-2015-7318 - Cross-site scripting XSS vulnerability in ZMI pages that use the...

RHEL 7 : libgit2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libgit2: NTFS protections inactive when running Git in the Windows Subsystem for Linux CVE-2020-12279 - A...

RHEL 5 : openldap (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openldap-servers: /usr/libexec/openldap/generate-server-cert.sh create world readable password file...

RHEL 6 : shadow-utils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - shadow-utils: TOCTOU race conditions by copying and removing directory trees CVE-2013-4235 Note that Nessus has not...

RHEL 7 : quay (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - quay: CSRF token does not expire and is leaked in query string CVE-2019-3864 - A vulnerability was found ...

RHEL 5 : xorg-x11-xfs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xfs heap overflow in the swapchar2b function CVE-2007-4990 - Integer overflow in the buildrange function ...

RHEL 4 : exim (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - exim: local root privilege escalation for configurations with perlstartup CVE-2016-1531 - The openlog...

RHEL 5 : libdmx (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libdmx: Multiple integer overflows leading to heap-based bufer overflows CVE-2013-1992 Note that Nessus has not...

RHEL 5 : libxxf86dga (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libXxf86dga: Array Index error leading to heap-based OOB write CVE-2013-2000 - Multiple integer overflows...

RHEL 5 : ewp-5 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - Xerces-J2 OpenJDK: XML parsing Denial of Service JAXP, 8017298 CVE-2013-4002 Note that Nessus has not tested for th...

RHEL 4 : quagga (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - quagga: DoS crash by processing malformed extended community attribute in a route CVE-2010-1674 Note that Nessus ha...

RHEL 5 : logrotate (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - logrotate: TOCTOU race condition by creation of new files between opening the file and moment, final...

RHEL 5 : libsmi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libsmi: buffer overflow in smiGetNode can lead to arbitrary code execution CVE-2010-2891 Note that Nessus has not...

RHEL 6 : pypam (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - PyPAM: Double free by processing passwords containing NULL-bytes CVE-2012-1502 Note that Nessus has not tested for...

RHEL 6 : mingw32-expat (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - expat: resource leak in readfilemap.c CVE-2012-1147 Note that Nessus has not tested for this issue but has instead...

RHEL 4 : xorg-x11 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - x11perfcomp has dot in its path CVE-2011-2504 - The LockServer function in os/utils.c in X.Org xserver...

RHEL 6 : tftp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - tftp: buffer overflow when setting utimeout option CVE-2011-2199 Note that Nessus has not tested for this issue but...

RHEL 4 : openoffice.org (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - raptor: XML External Entity XXE attack via RDF files CVE-2012-0037 Note that Nessus has not tested for this issue b...

RHEL 3 : fetchmail (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 3 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - fetchmail: denial of service in debug mode with multichar locales CVE-2010-1167 Note that Nessus has not tested for...