(PVS) Signatures - Tenable Network Security

Mozilla Thunderbird < 1.5.0.12 Multiple Vulnerabilities
PVS ID: 4072 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:25350
Description: Synopsis :\n\nThe remote Windows host contains a mail client that is affected by multiple
vulnerabilities.\n\nThe remote version of Mozilla Thunderbird suffers from various security
issues, at least one of which may lead to execution of arbitrary code on the affected host
subject to the user's privileges.
Solution: Upgrade to version 1.5.0.12 or higher.
CVE-2007-1558
Mozilla SeaMonkey < 1.0.9 / 1.1.2 Multiple Vulnerabilities
PVS ID: 4073 FAMILY: Web Clients RISK: HIGH NESSUS ID:25351
Description: Synopsis :\n\nA web browser on the remote host is prone to multiple flaws.\n\nThe
installed version of SeaMonkey contains various security issues, one of which may lead to
execution of arbitrary code on the affected host subject to the user's privileges.
Solution: Upgrade to version 1.0.9 / 1.1.2 or higher.
CVE-2007-1558
PHP < 5.2.3 Multiple Vulnerabilities
PVS ID: 4074 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:25368
Description: Synopsis : \n\nThe remote web server uses a version of PHP that is affected by multiple
flaws.\n\nAccording to its banner, the version of PHP installed on the remote host is older
than 5.2.3. Such versions may be affected by several issues including an integer overflow,
'safe_mode' and 'open_basedir' bypass, and a denial of service vulnerability. The reported
version of PHP is: \n %L
Solution: Upgrade to version 5.2.3 or higher.
CVE-2007-2756
ClamAV < 0.90.3 Multiple Vulnerabilities
PVS ID: 4075 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running the ClamAV anti-virus client version %L\n\nThis version of
ClamAV is vulnerable to a denial of service (DoS) attack when handling malformed RAR
archive files. An attacker exploiting this flaw would only need the ability to send an email
to the vulnerable system. Successful exploitation would result in the application crashing.
Solution: Upgrade to version 0.90.3 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1057