(PVS) Signatures - Tenable Network Security

Solution: Ensure that such services are authorized.
CVE Not available
Safari < 3.2.2 Multiple Vulnerabilities
PVS ID: 4932 FAMILY: Web Clients RISK: HIGH NESSUS ID:35687
Description: Synopsis : \n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nThe version of Safari installed on the remote Windows host is earlier than 3.2.2.
Such versions reportedly have multiple vulnerabilities : \n\n - Multiple input validation
issues in their handling of 'feed: ' URLs, which could be abused to execute arbitrary
JavaScript code in the local security zone. (CVE-2009-0137)\n\n - A cached certificate is
not required before displaying a lock icon for a HTTPS web site. This allows a
man-in-the-middle attacker to present the user with spoofed web pages over HTTPS that
appear to be from a legitimate source. (CVE-2009-2072)\n\n - The browser processes a
3xxx HTTP CONNECT before a successful SSL handshake, which could allow a
man-in-the-midddle attacker to execute arbitrary script code in the context of a HTTPS site.
(CVE-2009-2062)\n\nThe reported version of Safari is: \n %L
Solution: Upgrade to version 3.2.2 or higher.
CVE-2009-2072
Media Gateway Control Protocol (MGCP) Client Detection
PVS ID: 4933 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is a Media Gateway Control Protocol (MGCP) client. An MGCP client is
used to create sessions with an MGCP server. In particular, it is commonly used with
Voice-Over-IP (VoIP) services.
Solution: Ensure that such services are authorized.
CVE Not available
Sun Java System Directory Server 6.x < 6.3.1 LDAP JDBC Backend DoS
PVS ID: 4934 FAMILY: Generic RISK: HIGH NESSUS ID:35688
Description: Synopsis : \n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running the Sun Java System Directory Server, an LDAP server from Sun
Microsystems. The reported version number was: \n %L \n\n The installed version is older
than 6.3.1, and the proxy server included with such versions is reportedly affected by a
denial of service vulnerability. By sending a specially crafted request to the JDBC backend
through the proxy server, an unauthenticated remote attacker may be able to trigger a denial
of service condition.
Solution: Upgrade to version 6.3.1 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1302