(PVS) Signatures - Tenable Network Security

Description: The remote host is running the Sophos AV software version: %L
Solution: N/A
CVE Not available
Apache 2.4 < 2.4.3 Multiple Vulnerabilities
PVS ID: 6550 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:61644
Description: Synopsis:\n\nThe remote web server is affected by multiple vulnerabilities.\n\nThe remote
host is running a Apache HTTP server. For your information, the observed version of
Apache is:\n %L \n\n Versions earlier than 2.4.3 are vulnerable to the following
vulnerabilities :\n\n - An input validation error exists related to 'mod_negotiation',
'Multiviews' and untrusted uploads that can allow cross-site scripting attacks.
(CVE-2012-2687)\n\n - An error exists related to 'mod_proxy_ajp' and 'mod_proxy_http'
that can allow connections to remain open. This condition can allow information disclosure
when combined with specially crafted requests. (CVE-2012-3502)
Solution: Upgrade to Apache version 2.4.3 or later
CVE-2012-3502
Opera < 12.01 Multiple Vulnerabilities
PVS ID: 6551 FAMILY: Web Clients RISK: HIGH NESSUS ID:61414
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nThe remote host is running the Opera web browser. For your
information, the observed version of Opera is : \n %L \n\nVersions of Opera earlier than
12.01 are potentially affected by multiple vulnerabilities :\n\n - An error exists in the
handling of certain URLs that can lead to memory corruption and possible code execution.
(1016)\n\n - Errors exist in the handling of DOM elements and certain HTML characters
that can lead to cross-site scripting. (1025, 1026)\n\n - Download dialog boxes can be made
small enough that users may not realize they are accepting a download and further,
executing such a download. (1027)\n\n - An attacker could cause an application crash by
tricking a user into connecting to a malicious site, as demonstrated by the Lenovo 'Shop
Now' page. (CVE-2012-4146)
Solution: Upgrade to Opera 12.01 or later.
CVE-2012-4146
Hulu plus search detection on the Apple iPad
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 6552 FAMILY: Internet Services RISK: INFO NESSUS ID:Not Available
Family Internet Services 1791