(PVS) Signatures - Tenable Network Security

CVE Not available
JBoss EAP < 4.2.0.CP04 / 4.3.0.CP02 Status Servlet Information Disclosure
PVS ID: 4689 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe version of JBoss Enterprise Application Platform (EAP)
running on the remote host allows attackers to download '.class' files. These files can be
easily decompiled using a tool such as 'jad'. The attacker would then have access to the
source code which could lead to more sophisticated attacks. The reported version of JBOSS
is: \n %L
Solution: Upgrade to version 4.2.0.CP04, 4.3.0.CP02 or higher.
CVE-2008-3519
PHP iCalendar < 2.25 Administrative Bypass
PVS ID: 4690 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a flaw that allows for the
bypassing of authentication.\n\nThe remote host is running PHP iCalendar, an
open-source PHP blog. This version of iCalendar is vulnerable to a flaw where
a remote user can, by manually changing their cookie, gain administrative
access to the application. The reported version of PHP iCalendar is: \n %L \n
Solution: When available, upgrade to version 2.25 or higher.
CVE-2006-1292
Firefox < 3.0.2 Multiple Vulnerabilities
PVS ID: 4691 FAMILY: Web Clients RISK: HIGH NESSUS ID:34267
Description: Synopsis : \n\nThe remote Windows host contains a web browser that is affected by
multiple vulnerabilities.\n\nThe installed version of Firefox is affected by various security
issues : \n\n- An attacker can cause the content window to move while the mouse is being
clicked, causing an item to be dragged rather than clicked-on (MFSA 2008-40).\n -
Privilege escalation is possible via 'XPCnativeWrapper' pollution (MFSA 2008-41).\n -
There are several stability bugs in the browser engine that may lead to crashes with
evidence of memory corruption (MFSA 2008-42).\n - Certain BOM characters and low
surrogate characters, if HTML-escaped, are stripped from JavaScript code before it is
executed, which could allow for cross-site scripting attacks (MFSA 2008-43).\n - The
'resource: ' protocol allows directory traversal on Linux when using URL-encoded slashes,
and it can by used to bypass restrictions on local HTML files (MFSA 2008-44).\nThe
reported browser version was: \n %L
Solution: Upgrade to version 3.0.2 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1231