(PVS) Signatures - Tenable Network Security

loss of integrity and confidentiality.
Solution: Upgrade to version 2.0.4, 2.1.0 Alpha 3 or higher.
CVE-2005-1443
Leafnode < 1.11.2 Abrupt Disconnect DoS
PVS ID: 2880 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running the LeafNode NNTP server. The version of LeafNode is vulnerable
to a remote Denial of Service (DoS) attack. Specifically, when an upstream NNTP server
requests a header and then abruptly terminates the connection, the LeafNode NNTP server
fails. Successful exploitation would result in a loss of availability.
Solution: Upgrade to version 1.11.2 or higher.
CVE-2005-1453
Oracle Application Server < 10.1.0.0.3 Privilege Escalation
PVS ID: 2881 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the
bypassing of authentication.\n\nThe remote host is running the Oracle
Application Server. This version is reported vulnerable to a privilege escalation
flaw. Specifically, users with the 'create job' privileges can obtain
administrative access to the database. An attacker exploiting this flaw would
need a valid account that had the ability to create new database jobs. Successful
exploitation would result in the attacker being able to read or write confidential
data.
Solution: Upgrade to version 10.1.0.0.3 or higher.
CVE-2005-1496
Oracle Application Server < 10.1.0.0.4 Logging Service Interruption
PVS ID: 2882 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that would allow a single user to
affect logging-level changes for all users of a database.\n\nThe remote host is running the
Oracle Application Server. This version is reported vulnerable to a flaw where a SYS user
can disable Fine Grained Auditing (FGA) which then impacts the logging level of all users
of the database.
Solution: Upgrade to version 10.1.0.0.4 or higher.
Family Internet Services 745