(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote web server is vulnerable to multiple attack
vectors.\n\nAccording to its banner, the version of Apache 2.2 installed on the remote host
is older than 2.2.14. Such versions are potentially affected by multiple vulnerabilities : \n\n
- Faulty error handling in the Solaris pollset support (Event Port backend) which could
trigger hangs in the prefork and event MPMs on that platform (CVE-2009-2699)\n\n - The
'ap_proxy_ftp_handler' function in 'modules/proxy/proxy_ftp.c in the 'mod_proxy_ftp'
module allows remote FTP servers to cause a denial-of-service via a malformed reply to an
EPSV command. (CVE-2009-3094)\n\n - The 'mod_proxy_ftp' module allows remote
attackers to bypass intended access restrictions and send arbitrary commands to an FTP
server. (CVE-2009-3095)\n\nPVS cannot determine whether the affected module is in use.
For your information, the observed version of Apache is: \n %L
Solution: Either ensure the affected module is not in use or upgrade to Apache version 2.2.14 or later.
OSSProxy Detection
CVE-2009-3095
PVS ID: 5197 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is running software that should be authorized with respect
to corporate policy\n\nThe remote client is running OSSProxy.exe, an application that is
marketed to end users as a tool to speed up their Internet connection. The application routes
all web connections through a 3rd party proxy which is made available by NetSetter
(MarketScore). For your information, the User-Agent banner is: \n %L
Solution: Ensure that this software is in line with corporate policies and guidelines.
CVE Not available
Apple iPhone Wireless Connection Detection
PVS ID: 5198 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: The remote host is running an Apple iOS operating system. Further, the iPhone is
connected to the network via a wireless connection.
Solution: Ensure that the wireless connection is secured and operating within corporate guidelines.
CVE Not available
Sophos Enterprise Anti-virus Version Detection
PVS ID: 5199 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the Sophos Enterprise version: %L
Solution: N/A
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1384