(PVS) Signatures - Tenable Network Security

een applied, an unspecified vulnerability in JAX-RPC WS-Security component could
incorrectly validate 'UsernameToken'. (PK75992)\n\n - Sample applications shipped with
IBM WebSphere Application Server are affected by cross-site scripting vulnerabilities.
(PK76720)\n\n - The adminitrative console is affected by a cross-site scripting
vulnerability. (PK77505)\n\n - It may be possible for an attacker to read arbitrary
application-specific war files. (PK81387)\n\n - A session highjacking vulnerability exists in
the 'forced logout' feature. (PK74966)\n\nThe reported version of WebSphere is: %L\n
Solution: Apply Fix Pack 23 (6.1.0.23) or higher.
CVE-2009-0506
phpMyAdmin < 3.1.3.2 Multiple Code Execution Vulnerabilities (PMASA-2009-4)
PVS ID: 4997 FAMILY: CGI RISK: HIGH NESSUS ID:36171
Description: Synopsis :\n\nThe remote web server contains a PHP application that may allow execution
of arbitrary code\n\nThe setup script included with the version of phpMyAdmin installed
on the remote host does not properly sanitize user-supplied input before using it to generate
a config file for the application. This version has the following vulnerabilities : \n\n - The
setup script inserts the unsanitized verbose server name into a C-style comment during
config file generation. \n\n - An attacker can save arbitrary data to the generated config file
by altering the value of the 'textconfig' parameter during a POST request to config.php. An
unauthenticated remote attacker may be able to leverage these issues to execute arbitrary
PHP code.
Solution: Upgrade to version 3.1.3.2 or apply the patches referenced in the project's advisory.
CVE-2009-1285
Firefox < 3.0.9 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4998 FAMILY: Web Clients RISK: HIGH NESSUS ID:36215
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe installed
version of Firefox is earlier than 3.0.9. Such versions are potentially affected by the
following security issues :\n\n - Multiple remote memory corruption vulnerabilities exist
that can be exploited to execute arbitrary code in the context of the user running the
affected application. (MFSA 2009-14)\n\n - A flaw may exist where Unicode box drawing
characters are allowed in Internationalized Domain Names where they could be visually
confused with punctuation used in valid web addresses. An attacker can leverage this to
launch a phishing-type scam against a victim. (MFSA 2009-15)\n\n - A vulnerability exists
when the 'jar:' scheme is used to wrap a URI which serves the content with
'Content-Disposition: attachment'. An attacker can leverage this to subvert sites which use
this mechanism to mitigate content injection attacks. (MFSA 2009-16)\n\n - When an
Adobe Flash file is loaded via the 'view-source:' scheme, the Flash plugin misinterprets the
origin of the content as localhost. An attacker can leverage this to launch cross-site request
forgery attacks. It is also possible to exploit this to place cookie-like objects on victims'
computers. (MFSA 2009-17)\n\n - A vulnerability exists that allows attackers to inject
arbitrary scripts into sites via XBL bindings. This vulnerability requires the attacker to have
Family Internet Services 1321