Mailing List Archive

Plugin 34460
Hello,
I scanned an LDAP server and got :

Port commplex-main (5000/tcp)
Obsolete Web Server Detection

Synopsis :

The remote web server is obsolete.

Description :

According to its version, the remote web server is obsolete and no
longer maintained by its vendor or provider.

A lack of support implies that no new security patches are being
released for it.

Solution :

Upgrade to a newer version or switch to another server.

Risk factor :

High / CVSS Base Score : 7.5
(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)

Plugin output :
Netscape-Enterprise/6.0 support ended.
Upgrade to Sun Java System Web Server 6.1 or 7.0.

See also : http://www.sun.com/software/products/web_srvr/lifecycle.xml"]http://www.sun.com/software/products/web_srvr/lifecycle.xml



Nessus ID : 34460
--
BUT a check on SUN site says :

Version Name Status Last Order Date End-of-Service Life Date Comments 7.0 Java System Web Server Shipping TBD TBD Update 1 most current release 6.1 Java System Web Server Shipping TBD TBD Service Pack 8 most current release. 6.0 Sun ONE Web Server End-of-Service Life - Limited Support March 2005 June 2010 Service Pack 11 is most current release. Product licenses are no longer available. 4.1 iPlanet Web Server End-of-Service Life - No Support June 2002 March 2004 Service Pack 14 is last release. Product licenses and support are no longer available. 4.0 iPlanet Web Server/Netscape Enterprise Server End-of-Service Life - No Support October 2001 December 2002 Product and support no longer available. 3.6 Netscape Enterprise Server End-of-Service Life - No Support

Product and support no longer available.
IMHO, this version is supported till JUNE 2010, hence this seems to be a false positive....
Cordialement / Mit freundlichen Grüßen / Best regards, Patrice ARNAL Alcatel-Lucent 1rte Dr A.Schweitzer 67408 - ILLKIRCH - FRANCE Email: patrice.arnal@alcatel-lucent.fr Phone: +33 (0) 3 90 67 99 22 / 2197 99 22 Mobile: +33 (0) 6 07 67 68 08 Fax: +33 (0) 3 90 67 72 07
Re: Plugin 34460 [ In reply to ]
On Wednesday 19 November 2008 14:06:38 Patrice ARNAL wrote:
> IMHO, this version is supported till JUNE 2010, hence this seems to be a
> false positive....

Thanks for your report.
We fixed that, it should be in the next feed.
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus