(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to multiple local flaws.\n\nThe remote
host is running IBM DB2 database version %L.\nThis version is reported to be
vulnerable to a number of local flaws. The most serious of these flaws involves a
local buffer overflow. An attacker exploiting these flaws would need local access to
the DB2 server. Successful exploitation would result in the attacker executing
arbitrary code.
Solution: IBM has released Fixpak 2 for version 9.1 installs. Upgrade or patch older installations
according to vendor recommendations.
CVE-2007-1228
Firefox < 1.5.0.10 / 2.0.0.2 Multiple Vulnerabilities
PVS ID: 3922 FAMILY: Web Clients RISK: HIGH NESSUS ID:24701
Description: Synopsis :\n\nThe remote Windows host contains a web browser that is affected by
multiple vulnerabilities.\n\nThe installed version of Firefox is affected by various security
issues, some of which may lead to execution of arbitrary code on the affected host subject
to the user's privileges.
Solution: Upgrade to version 1.5.0.10, 2.0.0.2 or higher.
CVE-2007-0996
WebAPP < 0.9.9.6 Multiple Vulnerabilities
PVS ID: 3923 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running WebAPP, an open-source web portal application written in Perl. There is a flaw
in the remote version of this software that may allow an attacker to gain remote control of
the application. The exact nature of the flaws is currently unknown. However, given the
vendor's statement regarding the patches, the flaws are thought to be of a serious nature.
Solution: Upgrade to version 0.9.9.6 or higher.
CVE Not available
Google Desktop Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3924 FAMILY: Web Clients RISK: INFO NESSUS ID:24709
Description: Synopsis :\n\nThe remote host has Google Desktop installed.\n\nGoogle Desktop, a search
application for Windows that allows users to easily search for files on the computer, is
installed on the remote host. If the 'Advanced Features' or 'Search Across Computers'
options of Google Desktop are enabled, some data may be sent to Google's servers,
potentially breaching confidentiality and your corporate security policy.
Solution: Ensure that installing Google Desktop is authorized by your corporate policy.
Family Internet Services 1016