(PVS) Signatures - Tenable Network Security

Attachmate Reflection for Secure IT UNIX Server < 7.0 SP1 Multiple Vulnerabilities
PVS ID: 4632 FAMILY: SSH RISK: HIGH NESSUS ID:33948
Description: Synopsis : \n\nThe remote SSH service is affected by multiple vulnerabilities.\n\nThe
version of Attachmate Reflection for Secure IT UNIX Server installed on the remote host is
lower than 7.0 SP1 and thus reportedly affected by several issues : \n\n - There is an
inherited vulnerability in OpenSSL when parsing malformed ASN.1 structures leading to a
denial of service vulnerability (CVE-2006-2937).\n - There is an inherited vulnerability in
OpenSSL when parsing parasitic public keys leading to a denial of service vulnerability
(CVE-2006-2940).\n - There is an inherited vulnerability in OpenSSL when performing
Montgomery multiplication, leading to a side-channel attack vulnerability
(CVE-2007-3108).\n - There is an inherited vulnerability in OpenSSH with the execution of
the ~/.ssh2/rc session file (CVE-2008-1657).\n - There is an issue with the security of
forwarded X11 connections, leading to possible hijacking. (CVE-2008-1483)\n - There are
multiple unspecified other vulnerabilities.\nThe reported version of SSH is: \n %L
Solution: Upgrade to version 7.0 SP1 or higher.
CVE-2008-6021
Cisco Secure Access Control Server Detection
PVS ID: 4633 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server is part of an access policy control platform.\n\nThe
remote host appears to be running Cisco Secure Access Control Server, an access policy
control platform, on this port. It is used to centrally manage access to network resources.
Solution: Limit incoming traffic to this port if desired.
CVE Not available
Opera < 9.52 Multiple Vulnerabilities
PVS ID: 4634 FAMILY: Web Clients RISK: HIGH NESSUS ID:33949
Description: Synopsis :\n\nThe remote host contains a web browser that is affected by several
issues.\n\nThe version of Opera installed on the remote host is older than 9.52 and is
reportedly affected by several issues :\n\n - Specially-crafted URLs could start Opera in a
way that would allow execution of arbitrary code.\n - Invalid checking of what frames a
site can change, allowing a website to open pages from other sites.\n - An unspecified
cross-site scripting issue.\n - Custom shortcuts and menu commands may pass parameters
created from uninitialized memory.\n - Secure sites loading insecure content in a frame will
cause Opera to incorrectly display the padlock icon.\n - Feed sources can link to a user's
local disk, and appropriate JavaScript can detect if these files exist or not.\n - The page
address may be changed when a user subscribes to a newsfeed subscription using the feed
subscription button.
Solution: Upgrade to version 9.52 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1214