(PVS) Signatures - Tenable Network Security

user to browse to a malicious URI. Successful exploitation would result in attacker code
running within the victim browser possibly resulting in the loss of confidential data (such
as cookies).
Solution: Upgrade to version 2.0.14 or higher.
CVE-2005-1115
Oracle Database Multiple Remote Vulnerabilities
PVS ID: 2822 FAMILY: Database RISK: HIGH NESSUS ID:18034
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nAccording to its
version number, the installation of Oracle on the remote\nhost is reportedly subject to
multiple unspecified vulnerabilities.\nSome vulnerabilities don't require authentication. It
may allow an attacker\nto craft SQL queries such that they would be able to retrieve any
file on\nthe system and potentially retrieve and/or modify confidential data on the\ntarget's
Oracle server.
Solution: http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf
CVE-2005-3203
AS400 Default POP Services Information Disclosure
PVS ID: 2823 FAMILY: POP Server
RISK:
MEDIUM
NESSUS ID:18046
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running the AS400 (version 4.5 or higher) POP3 server. This
version of the POP daemon is vulnerable to an information disclosure flaw. An attacker can
gain information about valid accounts, accounts with expired passwords, system accounts
by querying the POP server. This information can be useful in other attacks that require a
user ID and/or password.
Solution: No solution is known at this time.
CVE-2005-1133
AS/400 Server Detection
PVS ID: 2824 FAMILY: Operating System Detection RISK: NONE NESSUS ID:Not Available
Description: The remote host is AS/400 version 4.5 or higher.
Solution: N/A
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
IBM WebSphere JSP Source Disclosure / XSS Vulnerabilities
Family Internet Services 728