TrustKeeper Scan Engine Update for April 27, 2016

Summary

The latest update to the TrustKeeper scan engine that powers our Trustwave Vulnerability Management product (including both internal and external vulnerability scanning) is now available. Enjoy!

New Vulnerability Test Highlights

Some of the more interesting vulnerability tests we added recently are as follows:

Oracle

• Oracle Database April 2016 CPU (CVE-2016-3454, CVE-2016-0681, CVE-2016-0677, CVE-2016-0690, CVE-2016-0691)
• Oracle Enterprise Manager April 2016 CPU (CVE-2015-7501)
• Oracle Fusion Middleware April 2016 CPU (CVE-2014-3576, CVE-2015-3195, CVE-2015-3197, CVE-2015-3253, CVE-2015-7182, CVE-2016-0468, CVE-2016-0479, CVE-2016-0671)
• Oracle GlassFish Server April 2016 CPU (CVE-2015-7182)
• Oracle MySQL Server April 2016 CPU (CVE-2015-3194, CVE-2016-0639, CVE-2016-0640, CVE-2016-0641, CVE-2016-0642, CVE-2016-0643, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647, CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0651, CVE-2016-0652, CVE-2016-0653, CVE-2016-0654, CVE-2016-0655, CVE-2016-0656, CVE-2016-0657, CVE-2016-0658, CVE-2016-0659, CVE-2016-0661, CVE-2016-0662, CVE-2016-0663, CVE-2016-0665, CVE-2016-0666, CVE-2016-0667, CVE-2016-0668, CVE-2016-0705, CVE-2016-2047)
• Oracle Solaris OS April 2016 CPU (CVE-2014-3566, CVE-2015-7236, CVE-2016-0623, CVE-2016-0669, CVE-2016-0676, CVE-2016-0693, CVE-2016-3419, CVE-2016-3441, CVE-2016-3462, CVE-2016-3465)
• Oracle WebLogic Server April 2016 CPU (CVE-2016-0638, CVE-2016-0675, CVE-2016-0688, CVE-2016-0696, CVE-2016-0700, CVE-2016-3416)

PHP

• PHP Denial of Service or information disclosure in PHAR extension (phar_parse_zipfile function in zip.c) (CVE-2016-3142)
• PHP Denial of Service via use-after-free vulnerability in WDDX extension (CVE-2016-3141)

Samba

• Denial of service vulnerability in Samba Active Directory server (CVE-2015-3223)
• Denial of Service vulnerability in Samba with Windows Domain Controller (CVE-2015-8467)
• Insufficient symlink verification in the Samba daemon (CVE-2015-5252)
• Missing access control check in the Samba vfs_shadow_copy2 module (CVE-2015-5299)
• Remote Denial of Server in Samba with an Active Directory LDAP server (CVE-2015-7540)
• Remote memory read attack in Samba LDAP server (CVE-2015-5330)

How to Update?

All Trustwave customers using the TrustKeeper Scan Engine receive the updates automatically as soon as an update is available. No action is required.