(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Bakbone NetVault, an enterprise backup/restore application. This version of
NetVault is reported to be vulnerable to a remote buffer overflow. The details of the flaw
are not currently known. It is believed that a successful attack would lead to arbitrary code
being executed.
Solution: Upgrade to version 7.4.0 or higher.
CVE Not available
ClamAV < 0.90.2 Multiple Vulnerabilities
PVS ID: 3966 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the ClamAV antivirus client version %L\n\nThis version of ClamAV is vulnerable
to multiple attack vectors. The more serious of the flaws is a buffer overflow. An attacker
exploiting this flaw would need to be able to manipulate ClamAV to scan a malicious file
(via email, web, etc.). Successful exploitation would result in the attacker executing
arbitrary code on the remote ClamAV scanner.
Solution: Upgrade to version 0.90.2 or higher.
CVE-2007-1997
XAMPP adodb.php mssql_connect Function Overflow
PVS ID: 3967 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the XAMPP web server, a version of Apache which comes pre-bundled with Perl,
MySQL, and PHP. This version of XAMPP is reported prone to a remote buffer overflow
via the mssql_connect() function. An attacker exploiting this flaw would send a malformed
argument to a script that passed the data to mssql_connect(). Successful exploitation would
result in the attacker executing arbitrary code on the server.
Solution: Upgrade to XAMPP greater than 1.6.0a.
CVE-2007-2079
ZoneAlarm Pro < 7.0.302.000 vsdatant Driver Local DoS
PVS ID: 3968 FAMILY: Generic
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running ZoneAlarm, a firewall for Windows. The vendor has released
version 7.0.302.000 of ZoneAlarm. This version corrects a flaw where a local user can
disable the firewall.
Family Internet Services 1028