(PVS) Signatures - Tenable Network Security

affected by different vulnerabilities.\nIAVA Reference : 2010-A-0022\nSTIG Finding
Severity : Category II
Solution: Upgrade to RealPlayer SP 1.0.5 or later.
CVE-2009-4248
DNS Client Query Detection
PVS ID: 5326 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote client has issued a name query for the following FQDN
Solution: N/A
realtimeonly
CVE Not available
Apache Tomcat < 5.5.29 / 6.0.24
PVS ID: 5327 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:44314
Description: Synopsis : \n\nThe remote web server is vulnerable to multiple attack vectors.\n\nThe
version of Apache Tomcat installed on the remote host is earlier than 5.5.29, or 6.0.24.
Such versions are potentially affected by multiple vulnerabilities : \n\n - When deploying
WAR files, the WAR files are not checked for directory traversal attempts. This allows an
attacker to create arbitrary content outside of the web root by including entries such as
'../../bin/catalina.sh' in the WAR. (CVE-2009-2693)\n\n - By default, Tomcat automatically
deploys any directories placed in a host's appBase. Depending on circumstances, files
normally protected by one or more security constraints may be deployed without those
security constraints, making them accessible without authentication. (CVE-2009-2901)\n\n
- When deploying WAR files, the WAR file names are not checked for directory traversal
attempts, which could lead to the deletion of arbitrary files in the host's work directory.
(CVE-2009-2902)\n\nFor your information, but observed version of Apache Tomcat is : \n
%L
Solution: Upgrade to Apache Tomcat 5.5.29, 6.0.24, or later.
CVE-2009-2902
Passive Vulnerability Scanner (PVS) Signatures
Google Chrome < 4.0.249.78 Multiple Vulnerabilities
PVS ID: 5328 FAMILY: Web Clients RISK: HIGH NESSUS ID:44317
Description: Synopsis : \n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nThe version of Google Chrome installed on the remote host is earlier than
4.0.249.78. Such versions are potentially affected by multiple vulnerabilities : \n\n - A
pop-up blocker bypass. (3275)\n\n - Cross-domain theft due to CSS design error.
(9877)\n\n - Browser memory error with stale pop-up block menu. (12523)\n\n - An
Family Internet Services 1425