(PVS) Signatures - Tenable Network Security

Solution: The vendor has released versions 5.2.5.4, 5.3.6.6, 5.4.2.7, and 5.5.2 to address these issues
CVE-2008-4828
Mort Bay Jetty < 6.1.17 Multiple Vulnerabilities
PVS ID: 5017 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors\n\nThe remote
instance of Mort Bay Jetty is vulnerable to a number of flaws. First, the application is
vulnerable to a cross-site-scripting flaw when displaying web directory listings. Secondly,
the application is prone to an information disclosure flaw which can be used to read files
outside the web root. Note: in order for the second flaw to be executed, Jetty must have
been configured to have DefaultServlet with support for aliases turned on. For your
information, the reported version of Jetty is: \n %L \n
Solution: Upgrade to Mort Bay Jetty 6.1.17 or later.
CVE-2009-1524
Openfire < 3.6.4 Arbitrary Password Manipulation
PVS ID: 5018 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote server can be tricked into modifying user credentials\n\nThe
remote host is running Openfire / Wildfire, an instant messaging server supporting the
XMPP protocol. According to its version, the installation of Openfire or Wildfire is
affected by a vulnerability which would allow a remote attacker to change the password of
any users. In particular, input sent to the 'passwd_change' parameter of the jabber: iq: auth
routine is not sufficiently sanitized. An attacker, exploiting this flaw, would be able to gain
access to any user account.\n\nThe reported version of Openfire is: \n %L \n
Solution: Upgrade to Openfire version 3.6.4 or later.
CVE-2009-1596
IceWarp Merak WebMail Server < 9.4.2 Multiple Vulnerabilities
PVS ID: 5019 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote webmail server is vulnerable to multiple attack vectors.\n\nThe
remote host is running IcewWarp WebMail Server - a webmail server for Windows and
Linux. According to its banner, the version of IceWarp installed on the remote host is
earlier 9.4.2. Such versions are reportedly affected by multiple vulnerabilities : \n\n -A SQL
injection vulnerability in the search form of the web-based groupware component.
(CVE-2009-1468)\n\n -A cross-site scripting vulnerability exists because the application
fails to properly sanitize HTML emails. An attacker can exploit this flaw through the
'cleanHTML()' function of the 'html/webmail/server/inc/tools.php' script.
Family Internet Services 1328