(PVS) Signatures - Tenable Network Security

Apple iPhone < 3.0.1 Overflow
PVS ID: 5110 FAMILY: Mobile Devices RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is an
iPhone version 3.x mobile phone. The observed banner was: \n %L \n\nThis version of
iPhone is vulnerable to a flaw in the way that it handles malformed SMS text messages. An
attacker, exploiting this flaw, would be able to execute arbitrary code on the remote system.
Solution: Upgrade to iPhone version 3.0.1 or higher
CVE-2009-2204
Apache < 2.2.12 Multiple Vulnerabilities
PVS ID: 5111 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote web server may be affected by several issues.\n\nAccording to
its banner, the version of Apache 2.2 installed on the remote host is older than 2.2.12. Such
versions may be affected by several issues : \n\n - A denial-of-service vulnerability in the
'mod_proxy' module could be exploited to cause the process to consume large amounts of
CPU resources. (CVE-2009-1890)\n\n - The 'mod_deflate' module is prone to a remote
denial-of-service vulnerability when large file downloads are terminated before completing.
(CVE-2009-1891)\n\nPVS cannot determine whether the affected modules are in use. The
installed version of Apache is: \n %L
Solution: Either ensure that the affected modules are not in use or upgrade to Apache version 2.2.12
or later.
CVE-2009-1891
VLC Media Player < 1.0.1 Remote Integer Underflow
PVS ID: 5112 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host contains an application that is affected by an integer
underflow vulnerability.\n\nThe version of VLC media player installed on the remote host
is earlier than 1.0.1. Such versions contain a flaw in the 'modules/access/rtsp/real.c' file of
VLC Player. If an attacker can trick a user into opening a specially crafted RDT data
stream, he may be able to execute arbitrary code within the context of the affected
application. The reported version of VLC is: \n %L
Solution: Upgrade to VLC Media Player 1.0.1 or later.
CVE Not available
Firefox < 3.0.13/3.5.0 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5113 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Family Internet Services 1357