(PVS) Signatures - Tenable Network Security

Solution: Upgrade to Interchange 5.7.2, 5.6.2, or 5.4.4.
CVE Not available
Firebird Database Client Detection
PVS ID: 5181 FAMILY: Database RISK: INFO NESSUS ID:Not Available
Description: The remote host is running a Firebird Database client.
Solution: N/A
CVE Not available
iTunes < 9.0.1 Remote Code Execution
PVS ID: 5182 FAMILY: Web Clients RISK: HIGH NESSUS ID:41061
Description: Synopsis : \n\nThe remote host is vulnerable to a remote code execution
attack.\n\nAccording to its banner, the version of iTunes installed on the remote host is
older than 9.0.1. Such versions are potentially affected by a remote buffer overflow when
opening specially crafted '.pls' files. An attacker could exploit this flaw to execute arbitrary
code on the remote host subject to the privileges of the user running the application. For
your information, the reported version of iTunes is: \n %L
Solution: Upgrade to iTunes 9.0.1 or later.
CVE-2009-2817
IBM WebSphere Application Server < 6.1.0.27 Multiple Vulnerabilities
PVS ID: 5183 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:41057
Description: Synopsis : \n\nThe remote host is running a web server that is vulnerable to multiple attack
vectors.\n\nIBM WebSphere Application Server 6.1.0 before Fix Pack 27 appears to be
running on the remote host. Such versions are potentially affected by multiple issues : \n\n -
Eclipse help system included with WebSphere Application Server is affected by a cross-site
scripting vulnerability. (PK78917)\n\n - It may be possible to bypass security restrictions
using a specially crafted HTTP HEAD method. (PK83258)\n\n - New applications
deployed in WebSphere Application Server for z/OS prior to 1.8 are saved on the file
system with insecure privileges resulting in disclosure of sensitive information.
(PK83308)\n\n - If JAAS-J2C Authentication Data is configured using wsadmin scripts, the
password value may appear in FFDC logs. (PK86137)\n\n - Apache APR-util is affected by
a denial of service issue. (PK88341)\n\n - Due to an error in expat XML parser APR-util is
affected by a denial of service issue. (PK88342)\n\n - It may be possible to trigger a denial
of service attack due to errors in fix packs 6.1.0.23 and 6.1.0.25. (PK91709)\n\nFor your
information, the reported version of WebSphere is: \n %L
Solution: Apply Fix Pack 27 (6.1.0.27) or later.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1379