(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 1.5.0.9 or higher.
CVE-2006-6505
Firefox < 1.5.0.9 / 2.0.0.1 Multiple Vulnerabilities
PVS ID: 3868 FAMILY: Web Clients RISK: HIGH NESSUS ID:23930
Description: Synopsis :\n\nThe remote Windows host contains a web browser that is affected by
multiple vulnerabilities.\n\nThe installed version of Firefox is affected by various security
issues, some of which may lead to execution of arbitrary code on the affected host subject
to the user's privileges.
Solution: Upgrade to version 1.5.0.9 / 2.0.0.1 or higher.
CVE-2006-6507
vBulletin < 3.6.5 .swf ActionScript XSS
PVS ID: 3869 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection attack.\n\nThe version of
vBulletin installed on the remote host fails to properly sanitize user-supplied input. Given
this, the application is prone to a file upload flaw. An attacker exploiting this flaw would
create a post that includes a malicious .swf file attachment. The malicious .swf file would
be uploaded to the target server. Users viewing the post and executing the .swf file would
be vulnerable to a loss of confidential data.
Solution: Upgrade to version 3.6.5 or higher.
CVE-2006-6779
Detection of .xls File Email Attachment
PVS ID: 3870 FAMILY: Data Leakage RISK: LOW NESSUS ID:Not Available
Description: The remote host was just observed sending the following .xls file. %L\nThe file was
observed as an email attachment. If the file is confidential, you should check your
mail server logs for the sender and/or recipient.
Solution: N/A
CVE Not available
Detection of .zip File Email Attachment
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3871 FAMILY: Data Leakage RISK: LOW NESSUS ID:Not Available
Family Internet Services 1001