(PVS) Signatures - Tenable Network Security

CVE Not available
OpenSSL < 0.9.8n Multiple Vulnerabilities
PVS ID: 5487 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:45359
Description: Synopsis : \n\nThe remote web server is vulnerable to multiple attack
vectors.\n\nAccording to its banner, the remote web server is running a version of
OpenSSL older than 0.9.8n. Such versions have the following vulnerabilities : \n\n -
Kerberos-enabled versions of OpenSSL do not check the return value when Kerberos
configuration files cannot be opened, leading to a crash. (CVE-2010-0433)\n\n - Rejecting
a SSL/TLS record with and incorrect version number can lead to a crash. This only affects
version 0.9.8m if a 'short' is 1 bits. Otherwise it affects all versions back to and including
0.9.8f. (CVE-2010-0740)\n\nFor your information, the observed version of OpenSSL is: \n
%L
Solution: Upgrade to OpenSSL 0.9.8n or later.
CVE-2010-0740
Interchange HTTP Response Splitting Vulnerability
PVS ID: 5488 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote web server is affected by a HTTP response splitting
vulnerability.\n\nThe remote web server is running Interchange, a web-based application
server. The installed version is potentially affected by an HTTP response splitting
vulnerability when the 'BounceReferrals' or 'BounceRobotSessionURL' directives are
enabled.\nFor your information, the observed version of Interchange is: \n %L
Solution: Upgrade to Interchange 5.4.5, 5.6.3, 5.7.6, or later.
CVE Not available
Mac OS X < 10.6.3 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5489 FAMILY: Generic RISK: HIGH NESSUS ID:45440
Description: Synopsis :\n\nThe remote host is missing a Mac OS X update that fixes various security
issues.\n\nThe remote host is running a version of Mac OS X 10.6 that is older than version
10.6.3. Mac OS X 10.6.3 contains security fixes for the following products :\n\n - AFP
Server\n\n - Apache\n\n - CoreAudio\n\n - CoreMedia\n\n - CoreTypes\n\n - CUPS\n\n -
DesktopServices\n\n - Disk Images\n\n - Directory Services\n\n - Dovecot\n\n - Event
Monitor\n\n - FreeRADIUS\n\n - FTP Server\n\n - iChat Server\n\n - ImageIO\n\n - Image
RAW\n\n - Libsystem\n\n - Mail\n\n - MySQL\n\n - OS Services\n\n - Password Server\n\n
- PHP\n\n - Podcast Producer\n\n - Preferences\n\n - PS Normalizer\n\n - QuickTime\n\n -
Ruby\n\n - Server Admin\n\n - SMB\n\n - Tomcat\n\n - Wiki Server\n\n - X11\n\nFor your
information, the observed version of Mac OS X is\n%L\nIAVA Reference :
Family Internet Services 1466