(PVS) Signatures - Tenable Network Security

PVS ID: 3972 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the IBM 'Tivoli Provisioning Manager for OS Deployment'
version %L
Solution: Ensure that you are running the latest version of TPMfOSd.
CVE Not available
PostgreSQL SECURITY DEFINER Functions Local Privilege Escalation
PVS ID: 3973 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a local 'privilege escalation' flaw.\n\nThe
remote host is running PostgreSQL, an open source relational database. This version is
vulnerable to a local 'privilege escalation' flaw. By accessing temporary objects, a local
user can escalate privileges. Successful exploitation would allow the local user to gain
access elevated access to PostgreSQL data.
Solution: Upgrade to version 7.3.19, 7.4.17, 8.0.13, 8.1.9, 8.2.4 or higher.
CVE-2007-2138
Winamp < 5.34 Malformed 'PLS' File Handling DoS
PVS ID: 3974 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Winamp, a multimedia software application. This version of
Winamp is vulnerable to a content-parsing flaw. Specifically, when handling malformed
PLS files, Winamp can be crashed. An attacker exploiting this flaw would need to be able
to convince a local user to open a malicious file with Winamp. Successful exploitation
would result in the application crashing.
Solution: Upgrade to version 5.34 or higher.
CVE Not available
QuickTime < 7.1.6 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3975 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple buffer overflows.\n\nAccording to
its version, the installation of QuickTime on the remote Windows host is affected by a flaw
in the way that it handles malformed Java byte code. An attacker exploiting this flaw would
need to be able to convince a user to browse to a malicious site. Further, the browser must
be Java-enabled and have a vulnerable version of QuickTime installed. Successful
exploitation would result in the attacker executing arbitrary code on the client system. In
addition, this version of QuickTime is vulnerable to an integer overflow and a heap
Family Internet Services 1030