(PVS) Signatures - Tenable Network Security

Apple iPhone/iPad OS < 4.3 Multiple Vulnerabilities
PVS ID: 5814 FAMILY: Mobile Devices RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is an iPhone, iPod Touch, or iPad running iOS. For your information, the observed version
of iOS is %L.\n\nVersions of iOS earlier than 4.3 are potentially affected by multiple
vulnerabilities. iOS 4.3 contains security fixes for the following products :\n\n -
CoreGraphics\n\n - ImageIO\n\n - libxml\n\n - Networking\n\n - Safari\n\n - WebKit\n\n -
Wi-Fi
Solution: Upgrade to iOS 4.3 or later.
CVE-2011-0192
Dropbox Client Retrieval Detection
PVS ID: 5815 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: Dropbox is a service to allow the transfer of large files which often cannot (or should not)
be transferred via email. The remote host retrieved the following file from dropbox.com :
%L
Solution: N/A
CVE Not available
Apache Tomcat 7.0.x < 7.0.11 Security Bypass Vulnerability
PVS ID: 5816 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:52634
Description: Synopsis : \n\nThe remote web server is affected by security bypass vulnerability.\n\nFor
your information, the observed version of Apache Tomcat installed on the remote host is :
\n %L \n\nVersions of Tomcat 7.0.x earlier than 7.0.11 are potentially affected by a
security bypass vulnerability. When a web application is started, 'ServletSecurity'
annotations might be ignored which could lead to some areas of the application not being
protected as expected.
Solution: Upgrade to Apache Tomcat 7.0.11 or later.
CVE-2011-1419
Facebook Chat Client Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5817 FAMILY: Internet Services RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the Facebook chat application.
Solution: Ensure this software meets corporate guidelines for employee use.
Family Internet Services 1579