(PVS) Signatures - Tenable Network Security

PVS ID: 4728 FAMILY: CGI RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the IBM Tivoli Storage Manager version: \n %L
Solution: N/A
CVE Not available
Opera < 9.62 Multiple Vulnerabilities
PVS ID: 4729 FAMILY: Web Clients RISK: HIGH NESSUS ID:34680
Description: Synopsis : \n\nThe remote host contains a web browser that is affected by several
issues.\n\nThe version of Opera installed on the remote host is earlier than 9.62 and thus
reportedly affected by several issues : \n\n - Opera fails to sanitize certain parameters
passed to the 'History Search' (906).\n - The browser's same-origin policy may be violated
because scripts running in the 'Links Panel' always run in the outermost frame of the page
(907).\n\nSuccessful exploitation would result in the attacker being able to execute
arbitrary script code in the unsuspecting user's browser and may also lead to cookie-based
credential theft, browser setting modifications and other attacks. These attacks require that
the attacker is able to trick a user into browsing to a malicious URI with the affected
application. The reported version of Opera browser is: \n %L
Solution: Upgrade to version 9.62 or higher.
CVE-2008-4795
UW-IMAP < 2007d.404 Multiple Utility Mailbox Name Overflow
PVS ID: 4730 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a buffer overflow.\n\nThere is a flaw in the
remote UW-IMAP server that allows a local user to execute arbitrary code on the server.
The flaw is in the way that UW-IMAP handles malformed data sent to the 'tmail' and
'dmail' local executables. An attacker exploiting this flaw would need local access as well
as the ability to execute the aforementioned binaries. Successful exploiation would result in
the attacker executing arbitrary code as the 'root' user. The observed banner (with version
info) was: \n %L
Solution: Upgrade to version 2007d.404 or higher.
CVE-2008-5006
Obsolete Web Server Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4731 FAMILY: Web Servers RISK: HIGH NESSUS ID:34460
Description: Synopsis : \n\nThe remote web server is obsolete.\n\nAccording to its version, the remote
web server is obsolete and no longer maintained by its vendor or provider. A lack of
support implies that no new security patches are being released for it. The remote version
of the web server was: \n %L
Family Internet Services 1243