(PVS) Signatures - Tenable Network Security

CVE Not available
Apache Axis2 < 1.5 'xsd' Parameter Directory Traversal
PVS ID: 5554 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:46741
Description: Synopsis :\n\nThe remote web server hosts a web application that is vulnerable to a
directory traversal attack.\n\nThe remote web server is hosting Axis2, a web services
engine. For your information, the observed version of Axis2 is : %L\n\nVersions of Axis2
earlier than 1.5 are potentially affected by a directory traversal vulnerability in the 'xsd'
parameter in activated services. An attacker, exploiting this flaw, can read arbitrary files on
the affected host.
Solution: Upgrade to Apache Axis2 1.5 or later.
CVE Not available
Acme thttpd Version Detection
PVS ID: 5555 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: N/A
Solution: N/A
CVE Not available
DB2 9.7 < Fix Pack 2 Multiple Vulnerabilities
PVS ID: 5556 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:46766
Description: Synopsis :\n\nThe remote database server is vulnerable to multiple attack vectors.\n\nFor
your information, the observed version of IBM DB2 is %L\n\nVersions of IBM DB2 9.7
earlier than Fix Pack 2 are potentially affected by multiple vulnerabilities :\n\n - If the
database configuration parameter 'AUTO_REVAL' is set to 'IMMEDIATE', system granted
privileges are note regenerated. (IC67008)\n\n - 'Monitor Administrative Views' available
in the SYSIBMADM schema are publicly viewable. (IC67819)\n\n - A weakness in the
SSL v3 / TLS protocol involving session renegotiation may allow an attacker to inject an
arbitrary amount of plaintext into the beginning of the application protocol stream, which
could facilitate man-in-the-middle attacks. (IC68055)\n\n - By sending a specially crafted
packet to Tivoli Monitoring Agent (KUDDB2) listening on TCP port 6014, it may be
possible to trigger a denial of service condition. (IC68762)
Solution: Upgrade to IBM DB2 9.7 Fix Pack 2
CVE-2010-0472
Exim < 4.72 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1488