Executive Summary

Summary
Title Multiple Vulnerabilities in Cisco ASA Software
Informations
Name cisco-sa-20140409-asa First vendor Publication 2014-04-09
Vendor Cisco Last vendor Modification 2014-04-09
Severity (Vendor) N/A Revision 1.0

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:S/C:C/I:C/A:C)
Cvss Base Score 8.5 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 6.8 Authentication Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

Cisco Adaptive Security Appliance (ASA) Software is affected by the following vulnerabilities: Cisco ASA ASDM Privilege Escalation Vulnerability Cisco ASA SSL VPN Privilege Escalation Vulnerability Cisco ASA SSL VPN Authentication Bypass Vulnerability Cisco ASA SIP Denial of Service Vulnerability

These vulnerabilities are independent of one another; a release that is affected by one of the vulnerabilities may not be affected by the others.

Successful exploitation of the Cisco ASA ASDM Privilege Escalation Vulnerability and the Cisco ASA SSL VPN Privilege Escalation Vulnerability may allow an attacker or an unprivileged user to elevate privileges and gain administrative access to the affected system.

Successful exploitation of the Cisco ASA SSL VPN Authentication Bypass Vulnerability may allow an attacker to obtain unauthorized access to the internal network via SSL VPN.

Successful exploitation of the Cisco ASA SIP Denial of Service Vulnerability may cause the exhaustion of available memory. This may cause system instability and in some cases lead to a reload of the affected system, creating a denial of service (DoS) condition.

Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available for some of the vulnerabilities.

This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-asa

Note: This security advisory does not provide information about the OpenSSL TLS Heartbeat Read Overrun Vulnerability identified by CVE-2014-0160 (also known as Heartbleed). For additional information regarding Cisco products affected by this vulnerability, refer to the Cisco Security Advisory available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed BEGIN PGP SIGNATURE Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org

iQIcBAEBAgAGBQJTRW5YAAoJEIpI1I6i1Mx3eL0P/0B7V5l5M5++F8QuYHbKcg85 7Rn1IAOjIWJyWHT5JgGAbNvCfYHe4eTdTvF0ijP8DErhfbxWOA3D7EegJY3dw6fo fiKHVoxguR8F4GW4jTq8miHFu0rQ8Yke1lGJPGEN6EbNof+MzAihTnwFoh0miz/8 h8PaxUI+XRMh7DgvdWIwdItj0afmsBJ+4Un1XqDw5YuaeVGsl6sxCXgnS2WaaCkA tJWhtXi0//piAdEKyTmRgV+vUWSCMvm3cmMjl6RaIUNvPgwcryfaLn6HxuOAEYKL ayAabGJ2WFYJzYdbyyomccJ/5AEApFubdxXC8aQkzVqVXhypbedJCP8v+AVFZFth s8qNGJc+4XL7F/ZrNPi7qRJy0Ll+eQJ4+wyIXSWv7uPuGDXuWctfXckfFc+DhtJL z+wWwhsgvXjnzkO8zIqAAY9USXzoJ33U9PztLE6SnP7tuorCS5ls3RMXQylS0DRc OYzSnRn9p44xvpBldE9TWl9oxo5eWMXyPGqo/pHzU1nBEqXZJesAr+D9PRXZvOHk 7kxIfCAE/6VASiWa4WtQ1Mb1uV99s9KKQhn0fAv5Fg/0WH2Q/9fTtcyHqB4cWXLE 9bM2c26iZGrwuYiUonHwi3bi2gNbF3TLsmxvV+W7/NihdVgJwv+jAxLahSLQ6Vji 9g1oNfty2EMETTgUmjkL =8YEX END PGP SIGNATURE _______________________________________________ cust-security-announce mailing list cust-security-announce@cisco.com To unsubscribe, send the command "unsubscribe" in the subject of your message to cust-security-announce-leave@cisco.com

Original Source

Url : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco (...)

CWE : Common Weakness Enumeration

% Id Name
40 % CWE-20 Improper Input Validation
20 % CWE-287 Improper Authentication
20 % CWE-264 Permissions, Privileges, and Access Controls
20 % CWE-125 Out-of-bounds Read

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:23812
 
Oval ID: oval:org.mitre.oval:def:23812
Title: DEPRECATED: ELSA-2014:0376: openssl security update (Important)
Description: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength, general purpose cryptography library. An information disclosure flaw was found in the way OpenSSL handled TLS and DTLS Heartbeat Extension packets. A malicious TLS or DTLS client or server could send a specially crafted TLS or DTLS Heartbeat packet to disclose a limited portion of memory per request from a connected client or server. Note that the disclosed portions of memory could potentially include sensitive information such as private keys. (CVE-2014-0160) Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Neel Mehta of Google Security as the original reporter. All OpenSSL users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all services linked to the OpenSSL library (such as httpd and other SSL-enabled services) must be restarted or the system rebooted.
Family: unix Class: patch
Reference(s): ELSA-2014:0376-00
CVE-2014-0160
Version: 4
Platform(s): Oracle Linux 6
Product(s): openssl
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:24241
 
Oval ID: oval:org.mitre.oval:def:24241
Title: The TLS and DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read
Description: The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.
Family: windows Class: vulnerability
Reference(s): CVE-2014-0160
Version: 10
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows Server 2008
Microsoft Windows 7
Microsoft Windows Server 2008 R2
Microsoft Windows 8
Microsoft Windows Server 2012
Microsoft Windows 8.1
Microsoft Windows Server 2012 R2
Product(s): OpenSSL
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:24324
 
Oval ID: oval:org.mitre.oval:def:24324
Title: ELSA-2014:0376: openssl security update (Important)
Description: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength, general purpose cryptography library. An information disclosure flaw was found in the way OpenSSL handled TLS and DTLS Heartbeat Extension packets. A malicious TLS or DTLS client or server could send a specially crafted TLS or DTLS Heartbeat packet to disclose a limited portion of memory per request from a connected client or server. Note that the disclosed portions of memory could potentially include sensitive information such as private keys. (CVE-2014-0160) Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Neel Mehta of Google Security as the original reporter. All OpenSSL users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all services linked to the OpenSSL library (such as httpd and other SSL-enabled services) must be restarted or the system rebooted.
Family: unix Class: patch
Reference(s): ELSA-2014:0376-00
CESA-2014:0160
CVE-2014-0160
Version: 9
Platform(s): Oracle Linux 6
CentOS Linux 6
Product(s): openssl
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:24718
 
Oval ID: oval:org.mitre.oval:def:24718
Title: RHSA-2014:0376: openssl security update (Important)
Description: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength, general purpose cryptography library. An information disclosure flaw was found in the way OpenSSL handled TLS and DTLS Heartbeat Extension packets. A malicious TLS or DTLS client or server could send a specially crafted TLS or DTLS Heartbeat packet to disclose a limited portion of memory per request from a connected client or server. Note that the disclosed portions of memory could potentially include sensitive information such as private keys. (CVE-2014-0160) Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Neel Mehta of Google Security as the original reporter. All OpenSSL users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all services linked to the OpenSSL library (such as httpd and other SSL-enabled services) must be restarted or the system rebooted.
Family: unix Class: patch
Reference(s): RHSA-2014:0376-00
CVE-2014-0160
CESA-2014:0376
Version: 9
Platform(s): Red Hat Enterprise Linux 6
CentOS Linux 6
Product(s): openssl
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26742
 
Oval ID: oval:org.mitre.oval:def:26742
Title: DEPRECATED: ELSA-2014-0376 -- openssl security update (Important)
Description: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength, general purpose cryptography library. An information disclosure flaw was found in the way OpenSSL handled TLS and DTLS Heartbeat Extension packets. A malicious TLS or DTLS client or server could send a specially crafted TLS or DTLS Heartbeat packet to disclose a limited portion of memory per request from a connected client or server. Note that the disclosed portions of memory could potentially include sensitive information such as private keys. (CVE-2014-0160) Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Neel Mehta of Google Security as the original reporter. All OpenSSL users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all services linked to the OpenSSL library (such as httpd and other SSL-enabled services) must be restarted or the system rebooted.
Family: unix Class: patch
Reference(s): ELSA-2014-0376
CVE-2014-0160
Version: 4
Platform(s): Oracle Linux 6
Product(s): openssl
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:29321
 
Oval ID: oval:org.mitre.oval:def:29321
Title: DSA-2896-2 -- openssl -- security update
Description: A vulnerability has been discovered in OpenSSL's support for the TLS/DTLS Heartbeat extension. Up to 64KB of memory from either client or server can be recovered by an attacker. This vulnerability might allow an attacker to compromise the private key and other sensitive data in memory.
Family: unix Class: patch
Reference(s): DSA-2896-2
CVE-2014-0160
Version: 3
Platform(s): Debian GNU/Linux 7.0
Debian GNU/kFreeBSD 7.0
Product(s): openssl
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1
Application 6
Application 5
Application 301
Application 1
Application 1
Application 1
Application 1
Application 1
Os 3
Os 9
Os 3
Os 2
Os 2
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1

ExploitDB Exploits

id Description
2014-04-24 Heartbleed OpenSSL - Information Leak Exploit (2) - DTLS Support
2014-04-10 Heartbleed OpenSSL - Information Leak Exploit (1)
2014-04-09 OpenSSL 1.0.1f TLS Heartbeat Extension - Memory Disclosure (Multiple SSL/TLS ...
2014-04-08 OpenSSL TLS Heartbeat Extension - Memory Disclosure

Information Assurance Vulnerability Management (IAVM)

Date Description
2014-05-01 IAVM : 2014-A-0063 - Multiple Vulnerabilities in McAfee VirusScan Enterprise for Linux
Severity : Category I - VMSKEY : V0050009
2014-05-01 IAVM : 2014-A-0062 - Multiple Vulnerabilities In McAfee Email Gateway
Severity : Category I - VMSKEY : V0050005
2014-05-01 IAVM : 2014-B-0050 - McAfee Web Gateway Information Disclosure Vulnerability
Severity : Category I - VMSKEY : V0050003
2014-04-24 IAVM : 2014-B-0046 - Multiple Vulnerabilities in HP System Management Homepage (SMH)
Severity : Category I - VMSKEY : V0049737
2014-04-17 IAVM : 2014-A-0056 - Multiple Vulnerabilities in Oracle Java SE
Severity : Category I - VMSKEY : V0049583
2014-04-17 IAVM : 2014-A-0057 - Multiple Vulnerabilities in Oracle MySQL Products
Severity : Category I - VMSKEY : V0049591
2014-04-17 IAVM : 2014-A-0053 - Multiple Vulnerabilities in Juniper Network JUNOS
Severity : Category I - VMSKEY : V0049589
2014-04-17 IAVM : 2014-A-0054 - Multiple Vulnerabilities in Oracle Database
Severity : Category I - VMSKEY : V0049587
2014-04-17 IAVM : 2014-A-0055 - Multiple Vulnerabilities in Oracle Fusion Middleware
Severity : Category I - VMSKEY : V0049585
2014-04-17 IAVM : 2014-A-0052 - Multiple Vulnerabilities in Cisco ASA
Severity : Category I - VMSKEY : V0049581
2014-04-17 IAVM : 2014-A-0058 - Multiple Vulnerabilities in Oracle & Sun Systems Product Suite
Severity : Category I - VMSKEY : V0049579
2014-04-17 IAVM : 2014-B-0041 - Multiple Vulnerabilities in Splunk
Severity : Category I - VMSKEY : V0049577
2014-04-17 IAVM : 2014-B-0042 - Stunnel Information Disclosure Vulnerability
Severity : Category I - VMSKEY : V0049575
2014-04-10 IAVM : 2014-A-0051 - OpenSSL Information Disclosure Vulnerability
Severity : Category I - VMSKEY : V0048667
2014-01-30 IAVM : 2014-A-0017 - Multiple Vulnerabilities in Cisco TelePresence Video Communication Server
Severity : Category I - VMSKEY : V0043846
2014-01-30 IAVM : 2014-A-0019 - Multiple Vulnerabilities in VMware Fusion
Severity : Category I - VMSKEY : V0043844
2013-11-21 IAVM : 2013-A-0222 - Multiple Vulnerabilties in VMware Workstation
Severity : Category II - VMSKEY : V0042383
2012-06-28 IAVM : 2012-A-0104 - Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
Severity : Category I - VMSKEY : V0033046

Snort® IPS/IDS

Date Description
2014-04-25 OpenSSL TLSv1.2 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30788-community - Revision : 5 - Type : SERVER-OTHER
2014-05-24 OpenSSL TLSv1.2 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30788 - Revision : 5 - Type : SERVER-OTHER
2014-04-25 OpenSSL TLSv1.1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30787-community - Revision : 5 - Type : SERVER-OTHER
2014-05-24 OpenSSL TLSv1.1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30787 - Revision : 5 - Type : SERVER-OTHER
2014-04-25 OpenSSL TLSv1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30786-community - Revision : 4 - Type : SERVER-OTHER
2014-05-24 OpenSSL TLSv1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30786 - Revision : 4 - Type : SERVER-OTHER
2014-04-25 OpenSSL SSLv3 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30785-community - Revision : 4 - Type : SERVER-OTHER
2014-05-24 OpenSSL SSLv3 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30785 - Revision : 4 - Type : SERVER-OTHER
2014-04-25 OpenSSL TLSv1.2 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30784-community - Revision : 4 - Type : SERVER-OTHER
2014-05-24 OpenSSL TLSv1.2 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30784 - Revision : 4 - Type : SERVER-OTHER
2014-04-25 OpenSSL TLSv1.2 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30783-community - Revision : 4 - Type : SERVER-OTHER
2014-05-24 OpenSSL TLSv1.2 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30783 - Revision : 4 - Type : SERVER-OTHER
2014-04-25 OpenSSL TLSv1.1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30782-community - Revision : 4 - Type : SERVER-OTHER
2014-05-24 OpenSSL TLSv1.1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30782 - Revision : 4 - Type : SERVER-OTHER
2014-04-25 OpenSSL TLSv1.1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30781-community - Revision : 5 - Type : SERVER-OTHER
2014-05-24 OpenSSL TLSv1.1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30781 - Revision : 5 - Type : SERVER-OTHER
2014-04-25 OpenSSL TLSv1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30780-community - Revision : 4 - Type : SERVER-OTHER
2014-05-24 OpenSSL TLSv1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30780 - Revision : 4 - Type : SERVER-OTHER
2014-04-25 OpenSSL TLSv1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30779-community - Revision : 4 - Type : SERVER-OTHER
2014-05-24 OpenSSL TLSv1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30779 - Revision : 4 - Type : SERVER-OTHER
2014-04-25 OpenSSL SSLv3 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30778-community - Revision : 4 - Type : SERVER-OTHER
2014-05-24 OpenSSL SSLv3 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30778 - Revision : 4 - Type : SERVER-OTHER
2014-04-25 OpenSSL SSLv3 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30777-community - Revision : 4 - Type : SERVER-OTHER
2014-05-24 OpenSSL SSLv3 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30777 - Revision : 4 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.2 large heartbeat response - possible ssl heartbleed at...
RuleID : 30742 - Revision : 2 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.2 large heartbeat response - possible ssl heartbleed at...
RuleID : 30741 - Revision : 3 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.1 large heartbeat response - possible ssl heartbleed at...
RuleID : 30740 - Revision : 2 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.1 large heartbeat response - possible ssl heartbleed at...
RuleID : 30739 - Revision : 3 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30738 - Revision : 2 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30737 - Revision : 3 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL SSLv3 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30736 - Revision : 2 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL SSLv3 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30735 - Revision : 3 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.2 heartbeat read overrun attempt
RuleID : 30734 - Revision : 4 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.2 heartbeat read overrun attempt
RuleID : 30733 - Revision : 5 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.1 heartbeat read overrun attempt
RuleID : 30732 - Revision : 4 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.1 heartbeat read overrun attempt
RuleID : 30731 - Revision : 5 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1 heartbeat read overrun attempt
RuleID : 30730 - Revision : 4 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1 heartbeat read overrun attempt
RuleID : 30729 - Revision : 5 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL SSLv3 heartbeat read overrun attempt
RuleID : 30728 - Revision : 4 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL SSLv3 heartbeat read overrun attempt
RuleID : 30727 - Revision : 5 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.2 large heartbeat response - possible ssl heartbleed at...
RuleID : 30726 - Revision : 4 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.2 large heartbeat response - possible ssl heartbleed at...
RuleID : 30725 - Revision : 3 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.1 large heartbeat response - possible ssl heartbleed at...
RuleID : 30724 - Revision : 4 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.1 large heartbeat response - possible ssl heartbleed at...
RuleID : 30723 - Revision : 3 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30722 - Revision : 4 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30721 - Revision : 3 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL SSLv3 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30720 - Revision : 4 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL SSLv3 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30719 - Revision : 3 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.2 heartbeat read overrun attempt
RuleID : 30718 - Revision : 5 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.2 heartbeat read overrun attempt
RuleID : 30717 - Revision : 4 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.1 heartbeat read overrun attempt
RuleID : 30716 - Revision : 5 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1.1 heartbeat read overrun attempt
RuleID : 30715 - Revision : 4 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1 heartbeat read overrun attempt
RuleID : 30714 - Revision : 5 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL TLSv1 heartbeat read overrun attempt
RuleID : 30713 - Revision : 4 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL SSLv3 heartbeat read overrun attempt
RuleID : 30712 - Revision : 5 - Type : SERVER-OTHER
2014-05-17 OpenVPN OpenSSL SSLv3 heartbeat read overrun attempt
RuleID : 30711 - Revision : 4 - Type : SERVER-OTHER
2014-04-15 OpenSSL Heartbleed masscan access exploitation attempt
RuleID : 30549-community - Revision : 2 - Type : SERVER-OTHER
2014-05-15 OpenSSL Heartbleed masscan access exploitation attempt
RuleID : 30549 - Revision : 2 - Type : SERVER-OTHER
2014-04-11 OpenSSL TLSv1.2 heartbeat read overrun attempt
RuleID : 30525-community - Revision : 4 - Type : SERVER-OTHER
2014-05-11 OpenSSL TLSv1.2 heartbeat read overrun attempt
RuleID : 30525 - Revision : 4 - Type : SERVER-OTHER
2014-04-11 OpenSSL TLSv1.1 heartbeat read overrun attempt
RuleID : 30524-community - Revision : 5 - Type : SERVER-OTHER
2014-05-11 OpenSSL TLSv1.1 heartbeat read overrun attempt
RuleID : 30524 - Revision : 5 - Type : SERVER-OTHER
2014-04-10 OpenSSL TLSv1.2 heartbeat read overrun attempt - vulnerable client response
RuleID : 30523-community - Revision : 9 - Type : SERVER-OTHER
2014-05-10 OpenSSL TLSv1.2 heartbeat read overrun attempt - vulnerable client response
RuleID : 30523 - Revision : 9 - Type : SERVER-OTHER
2014-04-10 OpenSSL TLSv1.1 heartbeat read overrun attempt - vulnerable client response
RuleID : 30522-community - Revision : 9 - Type : SERVER-OTHER
2014-05-10 OpenSSL TLSv1.1 heartbeat read overrun attempt - vulnerable client response
RuleID : 30522 - Revision : 9 - Type : SERVER-OTHER
2014-04-10 OpenSSL TLSv1 heartbeat read overrun attempt - vulnerable client response
RuleID : 30521-community - Revision : 9 - Type : SERVER-OTHER
2014-05-10 OpenSSL TLSv1 heartbeat read overrun attempt - vulnerable client response
RuleID : 30521 - Revision : 9 - Type : SERVER-OTHER
2014-04-10 OpenSSL SSLv3 heartbeat read overrun attempt - vulnerable client response
RuleID : 30520-community - Revision : 9 - Type : SERVER-OTHER
2014-05-10 OpenSSL SSLv3 heartbeat read overrun attempt - vulnerable client response
RuleID : 30520 - Revision : 9 - Type : SERVER-OTHER
2014-04-10 OpenSSL TLSv1.2 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30517-community - Revision : 11 - Type : SERVER-OTHER
2014-05-08 OpenSSL TLSv1.2 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30517 - Revision : 11 - Type : SERVER-OTHER
2014-04-10 OpenSSL TLSv1.1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30516-community - Revision : 11 - Type : SERVER-OTHER
2014-05-08 OpenSSL TLSv1.1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30516 - Revision : 11 - Type : SERVER-OTHER
2014-04-10 OpenSSL TLSv1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30515-community - Revision : 11 - Type : SERVER-OTHER
2014-05-08 OpenSSL TLSv1 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30515 - Revision : 11 - Type : SERVER-OTHER
2014-04-10 OpenSSL SSLv3 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30514-community - Revision : 11 - Type : SERVER-OTHER
2014-05-08 OpenSSL SSLv3 large heartbeat response - possible ssl heartbleed attempt
RuleID : 30514 - Revision : 11 - Type : SERVER-OTHER
2014-04-10 OpenSSL TLSv1.2 heartbeat read overrun attempt
RuleID : 30513-community - Revision : 8 - Type : SERVER-OTHER
2014-05-08 OpenSSL TLSv1.2 heartbeat read overrun attempt
RuleID : 30513 - Revision : 8 - Type : SERVER-OTHER
2014-04-10 OpenSSL TLSv1.1 heartbeat read overrun attempt
RuleID : 30512-community - Revision : 8 - Type : SERVER-OTHER
2014-05-08 OpenSSL TLSv1.1 heartbeat read overrun attempt
RuleID : 30512 - Revision : 8 - Type : SERVER-OTHER
2014-04-10 OpenSSL TLSv1 heartbeat read overrun attempt
RuleID : 30511-community - Revision : 8 - Type : SERVER-OTHER
2014-05-08 OpenSSL TLSv1 heartbeat read overrun attempt
RuleID : 30511 - Revision : 8 - Type : SERVER-OTHER
2014-04-10 OpenSSL SSLv3 heartbeat read overrun attempt
RuleID : 30510-community - Revision : 8 - Type : SERVER-OTHER
2014-05-08 OpenSSL SSLv3 heartbeat read overrun attempt
RuleID : 30510 - Revision : 8 - Type : SERVER-OTHER

Metasploit Database

id Description
2014-04-09 Cisco ASA SSL VPN Privilege Escalation Vulnerability

Nessus® Vulnerability Scanner

Date Description
2015-12-30 Name : The remote VMware ESXi host is missing a security-related patch.
File : vmware_VMSA-2014-0004_remote.nasl - Type : ACT_GATHER_INFO
2015-03-30 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2015-062.nasl - Type : ACT_GATHER_INFO
2015-03-12 Name : The remote host has software installed that is affected by multiple vulnerabi...
File : ibm_rational_clearquest_8_0_1_3_01.nasl - Type : ACT_GATHER_INFO
2015-01-19 Name : The remote Solaris system is missing a security patch for third-party software.
File : solaris11_openssl_20140731.nasl - Type : ACT_GATHER_INFO
2014-12-15 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201412-11.nasl - Type : ACT_GATHER_INFO
2014-11-26 Name : The remote OracleVM host is missing a security update.
File : oraclevm_OVMSA-2014-0032.nasl - Type : ACT_GATHER_INFO
2014-11-08 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2014-0377.nasl - Type : ACT_GATHER_INFO
2014-11-08 Name : The remote Red Hat host is missing a security update.
File : redhat-RHSA-2014-0378.nasl - Type : ACT_GATHER_INFO
2014-11-08 Name : The remote Red Hat host is missing a security update.
File : redhat-RHSA-2014-0396.nasl - Type : ACT_GATHER_INFO
2014-11-08 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2014-0416.nasl - Type : ACT_GATHER_INFO
2014-10-10 Name : The remote device is missing a vendor-supplied security patch.
File : f5_bigip_SOL15159.nasl - Type : ACT_GATHER_INFO
2014-08-29 Name : The remote host has software installed that is affected by an information dis...
File : kaspersky_internet_security_heartbleed.nasl - Type : ACT_GATHER_INFO
2014-08-10 Name : The remote Fedora host is missing a security update.
File : fedora_2014-9308.nasl - Type : ACT_GATHER_INFO
2014-08-07 Name : The remote Windows host has an application that is affected by an information...
File : hp_loadrunner_12_00_1.nasl - Type : ACT_GATHER_INFO
2014-08-06 Name : The remote host contains software that is affected by an information disclosu...
File : hp_vcrm_SSRT101531.nasl - Type : ACT_GATHER_INFO
2014-08-06 Name : The remote host contains software that is affected by an information disclosu...
File : hp_vca_SSRT101531.nasl - Type : ACT_GATHER_INFO
2014-08-06 Name : The remote host contains software that is affected by an information disclosu...
File : hp_vca_SSRT101531-sles.nasl - Type : ACT_GATHER_INFO
2014-08-06 Name : The remote host contains software that is affected by an information disclosu...
File : hp_vca_SSRT101531-rhel.nasl - Type : ACT_GATHER_INFO
2014-07-15 Name : The remote host is affected by an information disclosure vulnerability.
File : hp_onboard_admin_heartbleed_versions.nasl - Type : ACT_GATHER_INFO
2014-07-15 Name : The remote host contains an application that is affected by an information di...
File : libreoffice_423.nasl - Type : ACT_GATHER_INFO
2014-07-15 Name : The remote host contains an application that is affected by an information di...
File : macosx_libreoffice_423.nasl - Type : ACT_GATHER_INFO
2014-07-14 Name : The remote mail server is potentially affected by multiple vulnerabilities.
File : ipswitch_imail_12_4_1_15.nasl - Type : ACT_GATHER_INFO
2014-07-10 Name : The remote Windows host has migration software installed that is affected by ...
File : hp_insight_control_server_migration_7_3_2.nasl - Type : ACT_GATHER_INFO
2014-07-08 Name : The remote mail server is affected by the Heartbleed vulnerability
File : kerio_connect_824.nasl - Type : ACT_GATHER_INFO
2014-06-30 Name : An application on the remote host is affected by an information disclosure vu...
File : attachmate_reflection_heartbleed.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2014-398.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2014-318.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2014-277.nasl - Type : ACT_GATHER_INFO
2014-06-12 Name : The remote Mandriva Linux host is missing a security update.
File : mandriva_MDVSA-2014-123.nasl - Type : ACT_GATHER_INFO
2014-06-02 Name : The remote web server hosts a virtual appliance that is affected by multiple ...
File : wd_arkeia_10_1_19_ver_check.nasl - Type : ACT_GATHER_INFO
2014-06-02 Name : The remote HP OfficeJet printer is affected by an information disclosure vuln...
File : hp_officejet_pro_heartbleed.nasl - Type : ACT_GATHER_INFO
2014-05-27 Name : An application on the remote host is affected by an information disclosure vu...
File : attachmate_reflection_x_heartbleed.nasl - Type : ACT_GATHER_INFO
2014-05-20 Name : A clustered file system on the remote host is affected by multiple vulnerabil...
File : ibm_gpfs_isg3T1020683.nasl - Type : ACT_GATHER_INFO
2014-05-16 Name : The host is affected by an information disclosure vulnerability.
File : bluecoat_proxy_av_3_5_1_9.nasl - Type : ACT_GATHER_INFO
2014-05-14 Name : The version of Cisco TelePresence Video Communication Server installed on the...
File : cisco-vcs-CSCuo16472.nasl - Type : ACT_GATHER_INFO
2014-05-12 Name : The version of Symantec Endpoint Protection Manager installed on the remote h...
File : symantec_endpoint_prot_mgr_12_1_ru4_mp1a.nasl - Type : ACT_GATHER_INFO
2014-05-12 Name : An application on the remote host is affected by an information disclosure vu...
File : attachmate_reflection_secure_it_for_win_client_heartbleed.nasl - Type : ACT_GATHER_INFO
2014-05-08 Name : The remote VMware ESXi 5.5 host is potentially affected by multiple vulnerabi...
File : vmware_esxi_5_5_build_1746974_remote.nasl - Type : ACT_GATHER_INFO
2014-05-06 Name : The remote host has a device management application installed that is affecte...
File : vmware_horizon_workspace_vmsa2014-0004.nasl - Type : ACT_GATHER_INFO
2014-05-05 Name : The remote host has VPN client software installed that is affected by an info...
File : smb_kb2962393.nasl - Type : ACT_GATHER_INFO
2014-05-03 Name : The remote host is affected by an information disclosure vulnerability.
File : mcafee_vsel_SB10071.nasl - Type : ACT_GATHER_INFO
2014-05-03 Name : The remote VMware ESXi host is missing one or more security-related patches.
File : vmware_VMSA-2014-0004.nasl - Type : ACT_GATHER_INFO
2014-05-02 Name : The remote host is affected by an information disclosure vulnerability.
File : mcafee_web_gateway_SB10071.nasl - Type : ACT_GATHER_INFO
2014-05-02 Name : The remote host is affected by an information disclosure vulnerability.
File : mcafee_ngfw_SB10071.nasl - Type : ACT_GATHER_INFO
2014-05-02 Name : The remote host is affected by an information disclosure vulnerability.
File : mcafee_firewall_enterprise_SB10071.nasl - Type : ACT_GATHER_INFO
2014-05-02 Name : The remote host is affected by an information disclosure vulnerability.
File : mcafee_epo_sb10071.nasl - Type : ACT_GATHER_INFO
2014-05-02 Name : The remote host is affected by an information disclosure vulnerability.
File : mcafee_email_gateway_SB10071.nasl - Type : ACT_GATHER_INFO
2014-04-30 Name : The remote Fedora host is missing a security update.
File : fedora_2014-5337.nasl - Type : ACT_GATHER_INFO
2014-04-30 Name : The remote Fedora host is missing a security update.
File : fedora_2014-5321.nasl - Type : ACT_GATHER_INFO
2014-04-29 Name : The remote host has an email security application installed that is affected ...
File : websense_email_security_heartbleed.nasl - Type : ACT_GATHER_INFO
2014-04-29 Name : The remote host contains a web application that is affected by an information...
File : websense_web_security_heartbleed.nasl - Type : ACT_GATHER_INFO
2014-04-29 Name : The remote Windows host has an application that is affected by an information...
File : blackberry_es_UDS_kb35882.nasl - Type : ACT_GATHER_INFO
2014-04-22 Name : An application on the remote host is affected by an information disclosure vu...
File : openvpn_2_3_3_0.nasl - Type : ACT_GATHER_INFO
2014-04-21 Name : The remote FTP server is affected by an information disclosure vulnerability.
File : filezilla_server_0944.nasl - Type : ACT_GATHER_INFO
2014-04-21 Name : The remote host has a virtualization application that is affected by multiple...
File : vmware_workstation_multiple_vmsa_2014_0004.nasl - Type : ACT_GATHER_INFO
2014-04-21 Name : The remote host has a virtualization application that is affected by multiple...
File : vmware_workstation_linux_10_0_2.nasl - Type : ACT_GATHER_INFO
2014-04-21 Name : The remote host contains software that is affected by multiple vulnerabilities.
File : vmware_player_multiple_vmsa_2014-0004.nasl - Type : ACT_GATHER_INFO
2014-04-21 Name : The remote host contains software that is affected by multiple vulnerabilities.
File : vmware_player_linux_6_0_2.nasl - Type : ACT_GATHER_INFO
2014-04-21 Name : The remote host has a virtualization application that is affected by multiple...
File : macosx_fusion_6_0_3.nasl - Type : ACT_GATHER_INFO
2014-04-18 Name : The remote Windows host has an application that is affected by multiple vulne...
File : winscp_5_5_3.nasl - Type : ACT_GATHER_INFO
2014-04-18 Name : The remote web server is affected by multiple vulnerabilities.
File : hpsmh_7_3_2.nasl - Type : ACT_GATHER_INFO
2014-04-18 Name : The remote device is missing a vendor-supplied security patch.
File : juniper_jsa10623.nasl - Type : ACT_GATHER_INFO
2014-04-18 Name : The remote device is affected by an information disclosure vulnerability.
File : junos_pulse_jsa10623.nasl - Type : ACT_GATHER_INFO
2014-04-16 Name : The remote web server contains an application that is affected by multiple Op...
File : splunk_603.nasl - Type : ACT_GATHER_INFO
2014-04-16 Name : The remote Fedora host is missing a security update.
File : fedora_2014-4999.nasl - Type : ACT_GATHER_INFO
2014-04-15 Name : The remote Fedora host is missing a security update.
File : fedora_2014-4982.nasl - Type : ACT_GATHER_INFO
2014-04-15 Name : The remote device is missing a vendor-supplied security patch.
File : cisco-sa-20140409-asa.nasl - Type : ACT_GATHER_INFO
2014-04-15 Name : The remote device is potentially affected by an information disclosure vulner...
File : bluecoat_proxy_sg_6_5_3_6.nasl - Type : ACT_GATHER_INFO
2014-04-14 Name : The remote Windows host contains a program that is affected by an information...
File : stunnel_5_01.nasl - Type : ACT_GATHER_INFO
2014-04-14 Name : The remote service is affected by an information disclosure vulnerability.
File : openvpn_heartbleed.nasl - Type : ACT_ATTACK
2014-04-11 Name : The remote AIX host is running a vulnerable version of OpenSSL.
File : aix_openssl_advisory7.nasl - Type : ACT_GATHER_INFO
2014-04-11 Name : The remote host is affected by an information disclosure vulnerability.
File : fortinet_FG-IR-14-011.nasl - Type : ACT_GATHER_INFO
2014-04-09 Name : The remote Fedora host is missing a security update.
File : fedora_2014-4910.nasl - Type : ACT_GATHER_INFO
2014-04-09 Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2014-320.nasl - Type : ACT_GATHER_INFO
2014-04-09 Name : The remote Fedora host is missing a security update.
File : fedora_2014-4879.nasl - Type : ACT_GATHER_INFO
2014-04-08 Name : The remote Slackware host is missing a security update.
File : Slackware_SSA_2014-098-01.nasl - Type : ACT_GATHER_INFO
2014-04-08 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-2165-1.nasl - Type : ACT_GATHER_INFO
2014-04-08 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20140408_openssl_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2014-04-08 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2014-0376.nasl - Type : ACT_GATHER_INFO
2014-04-08 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2014-0376.nasl - Type : ACT_GATHER_INFO
2014-04-08 Name : The remote service is affected by an information disclosure vulnerability.
File : openssl_heartbleed.nasl - Type : ACT_ATTACK
2014-04-08 Name : The remote service may be affected by multiple vulnerabilities.
File : openssl_1_0_1g.nasl - Type : ACT_GATHER_INFO
2014-04-08 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201404-07.nasl - Type : ACT_GATHER_INFO
2014-04-08 Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_5631ae98be9e11e3b5e3c80aa9043978.nasl - Type : ACT_GATHER_INFO
2014-04-08 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-2896.nasl - Type : ACT_GATHER_INFO
2014-04-08 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2014-0376.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
Date Informations
2020-05-23 13:16:43
  • Multiple Updates
2014-12-13 13:22:55
  • Multiple Updates
2014-04-18 21:24:22
  • Multiple Updates
2014-04-16 13:23:31
  • Multiple Updates
2014-04-11 00:23:07
  • Multiple Updates
2014-04-10 00:19:26
  • First insertion