(PVS) Signatures - Tenable Network Security

within\nthe client browser.
Solution: Upgrade to version 2.0.5 or higher.
CVE-2005-0791
IBM WebSphere 'ResetPassword' Information Disclosure
PVS ID: 2712 FAMILY: Web Servers RISK: LOW NESSUS ID:17337
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote WebSphere webserver is vulnerable to an information leak. There is
a flaw in the default ResetPassword form that would allow a remote attacker to obtain
potentially confidential data (such as UserID) within the web server cache. An attacker
exploiting this flaw would only need to be able to browse to the affected system and view
the confidential data within the form source code.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
Ximian Evolution < 2.0.4 Content-Parsing DoS
PVS ID: 2713 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running a version of the Ximian Evolution email client that does not properly
validate malformed Unicode messages. By processing a malformed message, the client will
crash.
Solution: Upgrade to version 2.0.4 or higher.
CVE Not available
Jetty < 4.2.19 HttpRequest.java Content-Length DoS
PVS ID: 2714 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:17348
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Jetty, a Java web server that can be downloaded off the Internet and
is currently bundled with some IBM applications. This version of Jetty is vulnerable to a
remote Denial of Service (DoS) attack. An attacker exploiting this flaw would be able to
render the web server unavailable.
Solution: Upgrade to version 4.2.19 or higher.
CVE-2004-2381
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 697