(PVS) Signatures - Tenable Network Security

PVS ID: 5358 FAMILY: Web Servers RISK: HIGH NESSUS ID:45039
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nAccording to its
banner, the remote host is running a version of OpenSSL older than 0.9.8m. Such versions
potentially have the following vulnerabilities : \n\n - Session renegotiations are not handled
properly, which could be exploited to insert arbitrary plaintext by a man-in-the-middle.
(CVE-2009-3555)\n\n - The library does not check for a NULL return value from calls to
the bn_wexpand() function, which has unspecified impact. (CVE-2009-3245)\n\nFor your
information, the observed version of OpenSSL is: \n %L \nIAVA Reference :
2011-A-0107\nIAVB Reference : 2012-B-0038\nSTIG Finding Severity : Category I
Solution: Upgrade to OpenSSL 0.9.8m or later.
CVE-2009-3555
Mozilla Firefox cpe Version Detection
PVS ID: 5359 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: The remote host is running Firefox version: %L
Solution: N/A
CVE Not available
Samba 3.3.11 / 3.4.6 / 3.5.0 Security Bypass Vulnerability
PVS ID: 5360 FAMILY: Samba
RISK:
MEDIUM
NESSUS ID:45047
Description: Synopsis : \n\nThe remote Samba server is vulnerable to a security bypass
attack.\n\nAccording to its banner, the version of Samba Server on the remote host is
potentially affected by a security bypass vulnerability. A flaw exists that causes all smbd
processes to inherit CAP_DAC_OVERRIDE capabilities, allowing all file system access to
be allowed even when permissions should have denied access. For your information, the
observed version of Samba is: \n %L
Solution: Upgrade to Samba 3.3.12, 3.4.7, 3.5.1
CVE-2010-0728
Safari < 4.0.5 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5361 FAMILY: Web Clients RISK: HIGH NESSUS ID:45045
Description: Synopsis : \n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nThe version of Safari installed on the remote host is earlier than 4.0.5. Such
versions are potentially affected by several issues : \n\n A buffer underflow in ImageIO's
handling of TIFF images could lead to a crash or arbitrary code execution.
(CVE-2009-2285)\n\n - An integer overflow in the handling of images with an embedded
color profile could lead to a crash or arbitrary code execution. (CVE-2010-0040)\n\n - An
Family Internet Services 1436