TrustKeeper Scan Engine Update - July 10, 2013

The latest update to the TrustKeeper Scan Engine is now available. It adds detection for more than 70 vulnerabilities, including more than 25 recent vulnerabilities in Parallels Plesk and 35 older PHP vulnerabilities.

We also added detection for Apache CouchDB and its web-based administrative interface, Futon. By default, CouchDB allows unauthenticated remote access to its databases, which could allow unauthorized access to sensitive data unless authentication is enabled and/or network access is restricted.

New Vulnerability Test Highlights

Some of the more interesting vulnerability tests we added recently are as follows:

* CouchDB Unauthenticated Database Access

* Non-HttpOnly Session Cookies Identified
* Enumerated Transform Set Information for VPN Device
* Weak Encryption Ciphers Identified on VPN Device

How to Update?

All Trustwave customers using the TrustKeeper Scan Engine receive the updates automatically as soon as an update is available. No action is required.

Trustwave reserves the right to review all comments in the discussion below. Please note that for security and other reasons, we may not approve comments containing links.