The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. httpd: mod_mime buffer overread (CVE-2017-7679) httpd: Weak Digest auth nonce generation in mod_auth_digest (CVE-2018-1312) Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which reveals child process IDs (PID). (CVE-2003-1418) Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is…Read More
References
Back to Main