(PVS) Signatures - Tenable Network Security

Description: The remote client is an Android mobile device version: \n %L
Solution: Ensure that such devices are within corporate standards
CVE Not available
ViewVC < 1.1.3 Multiple Vulnerabilities
PVS ID: 5288 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote web server is vulnerable to multiple attack vectors.\n\nThe
remote web server is running ViewVC, a web-based interface for CVS and Subversion. The
installed version of ViewVC is earlier than 1.1.3. Such versions are potentially affected by
multiple issues : \n\n - A security vulnerability that involves root listing support of per-root
authorization configuration.\n\n - A security vulnerability in the 'query.py' involving the
'forbidden' authorizer.\n\nFor your information, the observed version of ViewVC is: \n %L
Solution: Upgrade to ViewVC 1.1.3 or later.
CVE Not available
Sun Java System Directory Proxy Server 6.x < 6.3.1 Update 1 Multiple Vulnerabilities
PVS ID: 5289 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:43615
Description: Synopsis : \n\nThe remote host is running the Sun Java system Directory Proxy Server, and
LDAP proxy server from Sun Microsystems. The installed version is earlier than 6.3.1
Update 1. Such versions are potentially affected by multiple vulnerabilities : \n\n - Under
certain conditions simultaneous long binds are incorrectly assigned the same backed
connections. An attacker may exploit this flaw to hijack an authenticated user's session and
perform unauthorized operations. (CVE-2009-4440)\n\n - 'SO_KEEPALIVE' socket option
is not enabled, and hence it may be possible for a remote attacker to trigger a denial of
service condition by exhausting available connection slots. (CVE-2009-4441)\n\n -
'max-client-connections' configuration setting is not correctly implemented, thus it may be
possible for a remote attacker to trigger a denial of service condition. (CVE-2009-4442)\n\n
- An unspecified vulnerability in the 'psearch' functionality could allow an attacker to
trigger a denial of service condition. (CVE-2009-4443)\n\nFor your information, the
observed version of Sun Java System Directory Proxy server is: \n %L \nIAVB Reference :
2010-B-0002\nSTIG Finding Severity : Category I
Solution: Upgrade to Sun Java System Directory Server 6.3.1 and apply patch 141958-01
CVE-2009-4443
Centreon < 2.1.4 Security Bypass
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5290 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Family Internet Services 1413