(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote browser may allow an attacker to read confidential
data.\n\nThe installed version of Firefox is reported to be vulnerable to a number of
flaws. The details of the flaws are not currently known; however, it is alleged that an
attacker can bypass security mechanisms in order to obtain local file contents. In
order for this attack to be a success, the attacker would need to be able to convince a
user to browsea malicious URI and expect that the user would allow a popup
window.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2007-0801
Jetty Non-random Session ID Vulnerability
PVS ID: 3904 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running an inherently insecure protocol or
application.\n\nThe remote host is running Jetty, a Java web server that can be downloaded
from the Internet and is currently bundled with some IBM applications. This version of
Jetty is vulnerable to a remote flaw within its random number generation. Jetty uses a
predictable algorithm to generate session IDs. Given this, an attacker can gather and
impersonate other accounts with generated session IDs. An attacker exploiting this flaw
would only need to be able to access the Jetty application that utilized Session IDs.
Solution: Upgrade to version 4.2.27, 5.1.12, 6.0.2, 6.1.0-pre3 or higher.
CVE-2006-6969
Samba < 3.0.24 nss_winbind.so.1 Multiple Function Overflow
PVS ID: 3905 FAMILY: Samba
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote Samba
server, according to its version number ('%L'), may be vulnerable to multiple remote buffer
overflows. The flaw appears to be in the way that Samba handles very long responses to
'gethostbyname' and 'getipnodebyname' name resolution. An attacker exploiting this flaw
would only need to be able to send a very long name to the vulnerable application.
Successful exploitation would result in the attacker executing arbitrary code on the Samba
server.
Solution: Upgrade to version 3.0.24 or higher.
CVE-2007-0453
Passive Vulnerability Scanner (PVS) Signatures
AXIGEN Mail Server IMAP Server Multiple Authentication Methods DoS
PVS ID: 3906 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:24321
Family Internet Services 1011