Plugin 34460

Hello,

I scanned an LDAP server and got :

Port commplex-main (5000/tcp)

Obsolete Web Server Detection

Synopsis :

The remote web server is obsolete.

Description :

According to its version, the remote web server is obsolete and no

longer maintained by its vendor or provider.

A lack of support implies that no new security patches are being

released for it.

Solution :

Upgrade to a newer version or switch to another server.

Risk factor :

High / CVSS Base Score : 7.5

(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)

Plugin output :

Netscape-Enterprise/6.0 support ended.

Upgrade to Sun Java System Web Server 6.1 or 7.0.

See also : http://www.sun.com/software/products/web_srvr/lifecycle.xml

Nessus ID : 34460

--

BUT a check on SUN site says :

Version

Name

Status

Last Order Date

End-of-Service Life Date

Comments

7.0

Java System Web Server

Shipping

TBD

TBD

Update 1 most current release

6.1

Java System Web Server

Shipping

TBD

TBD

Service Pack 8 most current release.

6.0

Sun ONE Web Server

End-of-Service Life - Limited Support

March 2005

June 2010

Service Pack 11 is most current release.
Product licenses are no longer available.

4.1

iPlanet Web Server

End-of-Service Life - No Support

June 2002

March 2004

Service Pack 14 is last release. Product
licenses and support are no longer available.

4.0

iPlanet Web Server/Netscape Enterprise Server

End-of-Service Life - No Support

October 2001

December 2002

Product and support no longer available.

3.6

Netscape Enterprise Server

End-of-Service Life - No Support

Product and support no longer available.

IMHO, this version is supported till JUNE 2010, hence this seems to be
a false positive....

Cordialement / Mit freundlichen Grüßen / Best regards,

Patrice ARNAL
Alcatel-Lucent

1rte Dr A.Schweitzer

67408 - ILLKIRCH - FRANCE
Email: [email protected]
Phone: +33 (0) 3 90 67 99 22 / 2197 99 22
Mobile: +33 (0) 6 07 67 68 08
Fax: +33 (0) 3 90 67 72 07

_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus