(PVS) Signatures - Tenable Network Security

PVS ID: 4769 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the Apple iPhone web utility.
Solution: N/A
CVE Not available
NetWitness Version Detection
PVS ID: 4770 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the NetWitness network investigator tool version: \n %L
Solution: N/A
CVE Not available
CUPS < 1.3.10 Multiple Overflows
PVS ID: 4771 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to an integer overflow.\n\nAccording to its
banner, the version of CUPS installed on the remote host is earlier than 1.3.10. Such
versions are affected by multiple integer overflow vulnerabilities : \n\n - A potential integer
overflow in the PNG image validation code in '_cupsImageReadPNG()'. (STR #2974)\n\n -
A heap-based integer overflow in '_cupsImageReadTIFF()'. (STR #3031)\n\n - The web
interface may be vulnerable to DNS rebinding attacks due to a failure to validate the HTTP
Host header in incoming requests. (STR #3118)\n\n - A heap-based buffer overflow in
pdftops. (CVE-2009-0195)\n\n - Flawed 'ip' structure initialization in the function
'ippReadIO()' could allow an attacker to crash the application.\n\n The reported version of
CUPS is: \n %L \n
Solution: Upgrade to version 1.3.10 or higher.
CVE-2009-0195
Passive Vulnerability Scanner (PVS) Signatures
Altiris Deployment Solution Server < 6.9.355 Password Disclosure (SYM08-020)
PVS ID: 4772 FAMILY: Generic RISK: LOW NESSUS ID:34964
Description: Synopsis : \n\nThe remote Windows host has a program that is affected by a password
disclosure vulnerability.\n\nThe version of the Altiris Deployment Solution installed on the
remote host is reportedly affected by a password disclosure vulnerability. Altiris
Deployment Solution Server reportedly stores 'Application Identity Account password' in
the system memory in plaintext. It may be possible for an authorized non-privileged user to
retrieve this password and make unauthorized modifications to the client systems. The level
of unauthorized access depends on the user group under which Application Identity
Account was registered during installation. The reported version number is: \n %L
Family Internet Services 1256