(PVS) Signatures - Tenable Network Security

French administration in 2002 and the development of SSF has been discontinued. SSF is
based upon an old version of OpenSSH and it implements an old version of the protocol.
As it is no longer maintained, it might be vulnerable to dangerous flaws.
Solution: Remove SSF and install an up-to-date version of OpenSSH.
CVE Not available
Informix Dynamic Server Multiple Remote Overflows
PVS ID: 4423 FAMILY: Database RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running the Informix database server version '%L'.\nThis version of Informix is reported
to be vulnerable to a number of remote flaws. While the details of the flaw are currently
unknown, it is believed that a successful attack would result in the attacker overflowing a
memory buffer and either executing arbitrary code or crashing the service.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2008-0949
IBM WebSphere Application Server < 6.1.0.15 Multiple Vulnerabilities
PVS ID: 4424 FAMILY: Web Servers RISK: HIGH NESSUS ID:45422
Description: Synopsis :\n\nThe remote application server is affected by multiple vulnerabilities.\n\nIBM
WebSphere Application Server 6.1 before Fix Pack 15 appears to be running on the remote
host. Such versions are reportedly affected by the following vulnerabilities :\n\n - There is
an unspecified security exposure in wsadmin (PK45726).\n\n - Sensitive information might
appear in clear text in the http_plugin.log file (PK48785).\n\n - There is an unspecified
potential security exposure in the 'PropFilePasswordEncoder' utility (PK52709).\n\n - There
is an unspecified potential security exposure with 'serveServletsByClassnameEnabled'
(PK52059).\n\n - Sensitive information may appear in plain text in startserver.log
(PK53198).
Solution: Apply Fix Pack 15 (6.1.0.15) or higher.
CVE Not available
Apple iPhone < 1.1.4 Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4425 FAMILY: Mobile Devices RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is an Apple iPhone. This version of iPhone is vulnerable to a flaw in the way
that the Safari browser handles memory. Specifically, when all memory has been utilized
by the browser, it will attempt to close all inactive documents. In the process of closing
these documents, a kernel panic and ensuing crash occurs. An attacker exploiting this flaw
would need to be able to entice an iPhone user to browse to a malicious web server.
Successful exploitation would result in the device crashing.
Family Internet Services 1154