(PVS) Signatures - Tenable Network Security

use-after-free vulnerabilities exist that could lead to remote code execution.
(CVE-2013-0649, CVE-2013-1374, CVE-2013-0644)\n\n - Two unspecified issues exist
that could lead to memory corruption and arbitrary code execution. (CVE-2013-0638,
CVE-2013-0647)\n\n - An unspecified information disclosure vulnerability exists.
(CVE-2013-0637)\n\n - An unspecified integer overflow vulnerability
exists.(CVE-2013-0639)
Solution: Upgrade to Flash Player 10.3.183.63 / 11.6.602.168 or later.
CVE-2013-1374
Siemens SIMATIC RF-MANAGER Detection (SCADA)
PVS ID: 6689 FAMILY: SCADA RISK: INFO NESSUS ID:64682
Description: The remote host has been identified as a Siemens SIMATIC RF-MANAGER. It is an RFID
management system.
Solution: Ensure that access to this server is restricted to only trusted hosts/networks
CVE Not available
Asterisk Peer Multiple Vulnerabilities (AST-2012-014 / AST-2012-015)
PVS ID: 6690 FAMILY: Generic RISK: HIGH NESSUS ID:64717
Description: Synopsis :\n\nThe remote VoIP server is affected by multiple vulnerabilities.\n\nFor your
information, the observed version of Asterisk is : \n %L \n\nAccording to the version in its
SIP banner, the version of Asterisk running on the remote host is potentially affected by the
following vulnerabilities :\n\n - A stack-based buffer overflow error exists related to SIP,
HTTP and XMPP handling over TCP. Note that in the case of 'Certified Asterisk', SIP is
not affected. Further note that in the case of XMPP, an attacker must establish an
authenticated session first. (CVE-2012-5976)\n\n - An error exists related to device state
cache and anonymous calls that could allow system resources to be exhausted. Note this
vulnerability only affects systems configured to allow anonymous calls. (CVE-2012-5977)
Solution: Upgrade to Asterisk 1.8.19.1 / 10.11.1 / 11.1.2, Certified Asterisk 1.8.11-cert10 or apply
the patches listed in the Asterisk advisory
Mozilla Firefox 18.x <
CVE-2012-5977
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 6691 FAMILY: Web Clients RISK: HIGH NESSUS ID:64723
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to multiple
vulnerabilities.\n\nFor your information, the observed version of Firefox is : \n %L
\n\nVersions of Firefox 18.x and older are potentially affected by the following security
issues :\n\n - Numerous memory safety errors exist. (CVE-2013-0783,
CVE-2013-0784)\n\n - An out-of-bounds read error exists related to the handling of GIF
images. (CVE-2013-0772)\n\n - An error exists related to 'WebIDL' object wrapping that
Family Internet Services 1841