(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nIBM WebSphere
Application Server 6.0.2 before Fix Pack 33 appears to be running on the remote host. Such
versions are reportedly affected by multiple vulnerabilities :\n\n - Provided an attacker has
valid credentials, it may be possible to hijack an authenticated session. (PK66676)\n\n -
The PerfServlet code writes sensitive information in the 'systemout.log' and ffdc files,
provided Performance Monitoring Infrastructure (PMI) is enabled. (PK63886)\n\n - It may
be possible to login to the administrative console using a user account that is locked by the
operating system. (PK67909)\n\n - An unknown vulnerability affects z/OS-based IBM
WebSphere application servers. (PK71143)\n\n - An unspecified vulnerability in the
administrative console could allow arbitrary file retrieval from the remote system.
(PK72036)\n\n - If APAR PK41002 has been applied, an unspecified vulnerability in
JAX-RPC WS-Security component could incorrectly validate 'UsernameToken'.
(PK75992)\n\n - Certain files associated with interim fixes for Unix-based versions of IBM
WebSphere Application Server are built with insecure file permissions. (PK78960)\n\nThe
reported version of WebSphere is: %L\n
Solution: Apply Fix Pack 33 (6.0.2.33) or higher.
CVE-2009-0506
IBM WebSphere Application Server 7.0 < Fix Pack 3 Multiple Vulnerabilities
PVS ID: 4991 FAMILY: Web Servers RISK: HIGH NESSUS ID:36133
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nIBM WebSphere
Application Server 7.0 before Fix Pack 3 appears to be running on the remote host. Such
versions are reportedly affected by multiple vulnerabilities.\n\n - Under certain conditions it
may be possible to access administrative console user sessions. (PK74966)\n\n - The
adminitrative console is affected by a cross-site scripting vulnerability. (PK77505)\n\n - If
APAR PK41002 has been applied, an unspecified vulnerability in JAX-RPC WS-Security
component could incorrectly validate 'UsernameToken'. (PK75992)\n\n - Sample
applications shipped with IBM WebSphere Application Server are affected by cross-site
scripting vulnerabilities. (PK76720)\n\n - Certain files associated with interim fixes for
Unix-based versions of IBM WebSphere Application Server are built with insecure file
permissions. (PK77590)\n\n - The Web Services Security component is affected by an
unspecified security issue in digital-signature specification. (PK80596)\n\n - It may be
possible for an attacker to read arbitrary application-specific war files. (PK81387)\n\n - The
application is prone to a session-highjacking vulnerability related to the 'forced logout'
feature. (PK74966)\n\n - A vulnerability affects the XML Digital Signature Specification in
the web services security component. (PK80596)\n\nThe reported version of WebSphere is:
%L\n
Solution: Apply Fix Pack 3 (7.0.0.3) or higher.
CVE-2009-0903
FTP Server .divx file Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4992 FAMILY: Data Leakage RISK: INFO NESSUS ID:Not Available
Family Internet Services 1319