(PVS) Signatures - Tenable Network Security

code execution (CVE-2008-1019, CVE-2008-1020, CVE-2008-1023). The remote client is
running QuickTime version: \n %L
Solution: Upgrade to version 7.4.5 or higher.
CVE-2008-1023
OpenSSH < 5.0 X11 Forwarding Local Session Hijacking
PVS ID: 4459 FAMILY: SSH
RISK:
MEDIUM
NESSUS ID:31737
Description: Synopsis : \n\nThe remote SSH service is prone to an X11 session hijacking
vulnerability.\n\nAccording to its banner, the version of SSH installed on the remote host is
older than 5.0. Such versions may allow a local user to hijack X11 sessions because it
improperly binds TCP ports on the local IPv6 interface if the corresponding ports on the
IPv4 interface are in use. The reported version of SSH is: \n %L
Solution: Upgrade to version 5.0 or higher.
CVE-2008-1483
Apache-SSL Environment Variables Manipulation
PVS ID: 4460 FAMILY: Web Servers RISK: HIGH NESSUS ID:31738
Description: Synopsis :\n\nThe remote web server is prone to a memory disclosure / privilege escalation
attack.\n\nAccording to its banner, the version of Apache-SSL installed on the remote host
is older than apache_1.3.41+ssl_1.59. Such versions fail to properly sanitize certificate data
before using it to populate environment variables. By sending a client certificate with
special characters for the subject, a remote attacker can overwrite certain environment
variables used by the web server, resulting in memory disclosure or potential privilege
escalation in a web application.
Solution: Upgrade to apache_1.3.41+ssl_1.59 or higher.
CVE-2008-0555
Passive Vulnerability Scanner (PVS) Signatures
Flash Player < 9.0.124.0 APSB08-11 Multiple Vulnerabilities
PVS ID: 4461 FAMILY: Web Clients RISK: HIGH NESSUS ID:31799
Description: Synopsis :\n\nThe remote Windows host contains a browser plugin that is affected by
multiple issues.\n\nAccording to its version number ('%L'), the instance of Flash Player on
the remote Windows host is affected by multiple issues, including several that could allow
for arbitrary code execution.\nIAVB Reference : 2008-B-0011\nSTIG Finding Severity :
Category II
Solution: Upgrade to version 9.0.124.0 or higher.
Family Internet Services 1164