Linux Server - Tunnel Hub-(CVE-2005-4900,CVE-2004-2761)

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

We are facing below vulnerabilities on our application servers, as per the KB these are addressed in 20.4 CU 3 patch, we are using 20.4.9 still below vulnerabilities are reflecting.

CVE-2005-4900,CVE-2004-2761

Environment

UIM 20.4CU9

Resolution

Follow the below step:-

Tunnel Server 

 a. Take backup of certs folder under hub.

 b. Clean all the contents under certs folder and restart hub tunnel server

 c. Recreate the certificate including root certificate from IM

 d. Use those new certificates to make a connection

 e. Re-scan that tunnel server