(PVS) Signatures - Tenable Network Security

using it in a database query. An unauthenticated remote attacker may be able to leverage
this flaw to manipulate SQL queries and bypass authentication, uncover sensitive
information, modify data, or launch attacks against the underlying database.\n\n Note that
successful exploitation of this issue requires that PHP's 'magic_quotes_gpc' be disabled.
Solution: Upgrade to version 2.1 alpha 5 or higher.
CVE-2007-1193
Dropbear < 0.49 Hostkey Host Spoofing Vulnerability
PVS ID: 3929 FAMILY: SSH RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that would allow remote attackers to
spoof trusted hosts.\n\nThe remote host is running Dropbear, a small, open-source SSH
server. The version of Dropbear installed on the remote host by default has a flaw where
the application fails to warn if the hostkey file has changed. An attacker exploiting this flaw
would be able to execute a man-in-the-middle attack against the Dropbear server.
Solution: Upgrade to version 0.49 or higher.
CVE-2007-1099
Qualys Scanner Detection
PVS ID: 3930 FAMILY: Policy RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote host is running the Qualys network scanner. The presence
of this software indicates that a group is scanning the network for vulnerabilities.
Solution: Ensure that this software is authorized for your network.
CVE Not available
Mozilla Thunderbird < 1.5.0.10 Multiple Vulnerabilities
PVS ID: 3931 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:24748
Description: Synopsis :\n\nThe remote Windows host contains a mail client that is affected by multiple
vulnerabilities.\n\n The remote version of Mozilla Thunderbird suffers from various
security issues, at least one of which may lead to execution of arbitrary code on the affected
host subject to the user's privileges.
Solution: Upgrade to version 1.5.0.10 or higher.
CVE-2007-0777
Passive Vulnerability Scanner (PVS) Signatures
Apache TomCat mod_jk < 1.2.21 Worker Map Remote Overflow
PVS ID: 3932 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Family Internet Services 1018