The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gimp: Heap-based buffer overflow in the script-fu console by sending overly long arguments to script-fu     server (CVE-2012-2763)

  - gimp: Use-after-free vulnerabilities in the channel and layer properties parsing process (CVE-2016-4994)

  - The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to     execute arbitrary commands via the python-fu-eval command. (CVE-2012-4245)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gimp: Use-after-free vulnerabilities in the channel and layer properties parsing process (CVE-2016-4994)

  - The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to     execute arbitrary commands via the python-fu-eval command. (CVE-2012-4245)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201603-01 (GIMP: Multiple vulnerabilities)

    GIMP&rsquo;s network server, scriptfu, is vulnerable to the remote execution       of arbitrary code via the python-fu-eval command due to not requiring       authentication.  Additionally, the X Window Dump (XWD) plugin is       vulnerable to multiple buffer overflows possibly allowing the remote       execution of arbitrary code or Denial of Service.  The XWD plugin is       vulnerable due to not validating large color entries.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process due or perform a Denial of Service.
  Workaround :

    There is no known work around at this time.

The remote Solaris system is missing necessary patches to address security updates :

  - The scriptfu network server in GIMP 2.6 does not require     authentication, which allows remote attackers to execute     arbitrary commands via the python-fu-eval command.
    (CVE-2012-4245)

ID	Name	Product	Family	Severity
198432	RHEL 6 : gimp (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198378	RHEL 5 : gimp (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
89712	GLSA-201603-01 : GIMP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
80621	Oracle Solaris Third-Party Patch Update : gimp (cve_2012_4245_arbitrary_code)	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2012-4245

critical

Tenable Plugins

high

high

medium

medium