(PVS) Signatures - Tenable Network Security

Solution: Upgrade to SeaMonkey 2.7.2 or later.
CVE-2011-3026
7T-IGSS Server Detected (SCADA)
PVS ID: 6330 FAMILY: SCADA RISK: INFO NESSUS ID:Not Available
Description: The remote host is a 7T Interactive Graphical SCADA System(IGSS) used to control and
monitor programmable logic controllers(PLC) in industrial processes. The following
version was detected: %L.
Solution: Restrict access to the server to authorized personnel only. As well ensure that the product is
up to date on all of its security patches.
CVE Not available
Apache Tomcat 5.5.x < 5.5.35 Hash Collision Denial of Service
PVS ID: 6331 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:57540
Description: Synopsis :\n\nThe remote web server is affected by a denial of service vulnerability.\n\nFor
your information, the observed version of Apache Tomcat installed on the remote host is :
\n %L \n\nVersions of Tomcat 5.x earlier than 5.5.35 are potentially affected by a denial of
service vulnerability. Large numbers of crafted form parameters can cause excessive CPU
consumption due to hash collisions.
Solution: Upgrade to Apache Tomcat 5.5.35 or later.
CVE-2012-0022
Passive Vulnerability Scanner (PVS) Signatures
Apache Tomcat 6.0.x < 6.0.35 Multiple Vulnerabilities
PVS ID: 6332 FAMILY: Web Servers RISK: HIGH NESSUS ID:57080
Description: Synopsis :\n\nThe remote web server is affected by a denial of service vulnerability.\n\nFor
your information, the observed version of Apache Tomcat installed on the remote host is :
\n %L \n\nVersions of Apache Tomcat 6.0.35 are potentially affected by multiple
vulnerabilities :\n\n - Specially crafted requests are incorrectly processed by Tomcat and
can cause the server to allow injection of arbitrary AJP messages. This can lead to
authentication bypass and disclosure of sensitive information. Note this vulnerability only
occurs when the following are true (CVE-2011-3190):\n\n - the
org.apache.jk.server.JkCoyoteHandler AJP connector is not used.\n - POST requests are
accepted.\n - Large numbers of crafted form parameters can cause excessive CPU
consumption due to hash collisions. (CVE-2011-4858, CVE-2012-0022)\nIAVB Reference
: 2012-B-0035\nSTIG Finding Severity : Category I
Solution: Upgrade to Apache Tomcat 6.0.35 or later.
Family Internet Services 1730