Backported security patch detection

Last Name. Company Name. Job Title. Your Email. Phone Number. Want to see Beyond Security in action? Get a Demo. Press Careers Blog Support Contact. Ask the Community Instead! Knowledge Article.

Information Applies To. Nessus Professional;Tenable. Operating System s. Article Number. We have attached CVE names to all our advisories since January , allowing customers to easily cross-reference vulnerabilities and find out how and when we fixed them, independent of version numbers.

We also supply OVAL definitions machine-readable versions of our advisories that third-party vulnerability tools can use to determine the status of vulnerabilities, even when security fixes have been backported. In doing this, we hope to remove some of the confusion surrounding backporting and make it easier for customers to always keep up to date with the latest security fixes.

Backporting Security Fixes We use the term backporting to describe the action of taking a fix for a security flaw out of the most recent version of an upstream software package and applying that fix to an older version of the package we distribute. Here is an example of why we backport security fixes: Red Hat provides version 5.

When we backport security fixes, we: identify the fixes and isolate them from any other changes make sure the fixes do not introduce unwanted side effects apply the fixes to our previously released versions For most products, our default practice is to backport security fixes, but we do sometimes provide version updates for some packages after careful testing and analysis.

Explaining Common Release-Numbering Confusion Backporting has a number of advantages for customers, but it can create confusion when it is not understood. An NTP server is listening on the remote host. It is, therefore, affected by a remote denial of service vulnerability due to a NULL pointer dereference flaw.

The remote host is affected by a remote denial of service vulnerability. Upgrade to Openswan 2. It is, therefore, affected by a remote denial of service vulnerability due to a use-after-free flaw in the cryptographic helper handler. A remote attacker can exploit this issue to cause a denial of service. Upgrade to Openswan version 2. This plugin lists the newest version of each patch to install to make sure the remote host is up-to-date. The remote host is missing several patches.

Install the patches listed below. This is typically indicative of a VPN server. VPN servers are used to connect remote hosts into internal resources. Make sure that the use of this VPN endpoint is done in accordance with your corporate security policy.

Also note that this plugin does not run over IPv6. A VPN server is listening on the remote port. If this service is not needed, disable it or filter incoming traffic to this port. It is also possible sometimes to guess the version of the operating system.

It is possible to guess the remote operating system. This may come from a badly configured reverse DNS or from a host file in use on the Nessus scanning host. As a result, URLs in plugin output may not be directly usable in a web browser and some web tests may be incomplete.

The remote host's hostname is not consistent with DNS information. Fix the reverse DNS or host file. This plugin displays information about the Nessus scan. The remote service could be identified. RFC advises against using Arcfour due to an issue with weak keys. The remote SSH server is configured to allow weak encryption algorithms or no algorithm at all.

Contact the vendor or consult product documentation to remove the weak ciphers. It shall be reasonably quick even against a firewalled target. Note that SYN scans are less intrusive than TCP full connect scans against broken services, but they might cause problems for less robust firewalls and also leave unclosed connections on the remote target, if the network is loaded. It is possible to determine which TCP ports are open. Protect your target with an IP filter. It is possible to guess the remote device type.

Banner-based checks have been disabled to avoid false positives. Note that this test is informational only and does not denote any security problem. Security patches are backported. Using this information, it is possible to connect and bind to each service by sending an RPC request to the remote port. This does not necessarily indicate a problem with the scan. Credentials may not have been provided, local checks may not be available for the target, the target may not have been identified, or another issue may have occurred that prevented local checks from being enabled.

See plugin output for details. This plugin reports informational findings related to local checks not being enabled. Local checks were not enabled. Get information for a vulnerability Retrieves details for the specified vulnerability. Severity number Integer [] indicating how severe the vulnerability is, where 0 is info only.