The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a "BREACH" attack, a different issue than CVE-2012-4929.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - httpd: mod_mime buffer overread (CVE-2017-7679)

  - httpd: Weak Digest auth nonce generation in mod_auth_digest (CVE-2018-1312)

  - Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive     information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which     reveals child process IDs (PID). (CVE-2003-1418)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - firefox: Possible integer overflow to fix inside XML_Parse in Expat (CVE-2016-9063)

  - httpd: Weak Digest auth nonce generation in mod_auth_digest (CVE-2018-1312)

  - Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive     information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which     reveals child process IDs (PID). (CVE-2003-1418)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201606-06 (nginx: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in nginx. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly cause a Denial of Service condition via       a crafted packet.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
198611	RHEL 5 : httpd (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198583	RHEL 6 : httpd (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
103587	GLSA-201606-06 : nginx: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2013-3587

medium

Tenable Plugins

critical

critical

high