(PVS) Signatures - Tenable Network Security

Subversion\n - Time Machine\n - WebDAV Sharing\n - Webmail\n - X11\nIAVA
Reference : 2012-A-0020\nIAVA Reference : 2012-A-0085\nIAVB Reference :
2012-B-0006\nSTIG Finding Severity : Category I
Solution: Upgrade to Mac OS X 10.7.3 or later.
CVE-2011-3463
PHP 5.3.9 php_register_variable_ex() Code Execution
PVS ID: 6304 FAMILY: Web Servers RISK: HIGH NESSUS ID:58039
Description: Synopsis :\n\nThe remote web server uses a version of PHP that is affected by a code
execution vulnerability.\n\nFor your information, the version of PHP installed on the
remote host is :\n %L \n\nPHP version 5.3.9 is reportedly affected by a code execution
vulnerability. Specifically, the fix for the hash collision denial of service vulnerability
(CVE-2011-4885) itself has introduced a remote code execution vulnerability in the
php_register_variable_ex() in the file php_variables.c. A new configuration variable,
max_input_vars, was added as part of the fix. If the number of input variables exceeds this
value and the variable being processed is an array, code execution can occur.
Solution: Upgrade to PHP version 5.3.10 or later.
CVE-2012-0830
RealWin Management Server HMI Service Detection (SCADA)
PVS ID: 6305 FAMILY: SCADA RISK: INFO NESSUS ID:Not Available
Description: The remote server is running the RealWin Management Server. This software server is
used to manage a wide range of SCADA devices. The Server has an HMI service listening
on port 912/tcp. The PVS has just observed the following user logging into the Server : %P
Solution: N/A
realtimeonly
CVE Not available
Mozilla Firefox 9.0 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 6306 FAMILY: Web Clients RISK: HIGH NESSUS ID:57773
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nThe remote host has a web browser installed that is vulnerable to
multiple attack vectors.\n\nFor your information, the observed version of Firefox is : \n %L
\n\nVersions of Firefox 9.0 are potentially affected by the following security issues : \n\n -
A use-after-free error exists related to removed nsDOMAttribute child nodes.
(CVE-2011-3659)\n\n - Various memory safety issues exist. (CVE-2012-0442,
CVE-2012-0443)\n\n - Memory corruption errors exist related to the decoding of Ogg
Vorbis files and processing of malformed XSLT stylesheets. (CVE-2012-0444,
Family Internet Services 1721