(PVS) Signatures - Tenable Network Security

Mozilla SeaMonkey < 1.1.4 Multiple Vulnerabilities
PVS ID: 4153 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote Windows host contains a web browser that is affected by
multiple vulnerabilities.\n\nThe installed version of SeaMonkey allows unescaped URIs to
be passed to external programs, may lead to execution of arbitrary code on the affected host
subject to the user's privileges, and could also allow privilege escalation attacks against
addons that create 'about:blank' windows and populate them in certain ways.
Solution: Upgrade to version 1.1.4 or higher.
CVE-2007-3844
Kaspersky Ani-Spam < 3.0.0 [0278] File Permission Weakness Local Privilege Escalation
PVS ID: 4154 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a local flaw due to the way that it creates
local file permissions.\n\nThe remote host is running the Kaspersky Anti-spam server. This
version of Kaspersky is vulnerable to a local flaw. Specifically, it is alleged that the
application creates local files with permissions that would allow a local attacker the ability
to either gain access to confidential data or subvert the integrity of the application. The
details of the flaw are currently unknown; however, the vendor has acknowledged the flaw.
An attacker exploiting these flaws would need local access to the machine. Successful
exploitation would result in the attacker gaining access to confidential data or processes.
Solution: Upgrade to version 3.0.0 [0278] or higher.
CVE-2007-4206
Microsoft Office Version Information
PVS ID: 4155 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the Microsoft Office suite of business tools. The exact version
is \n%L
Solution: N/A
CVE Not available
YouSendIt Client Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4156 FAMILY: Internet Services RISK: LOW NESSUS ID:Not Available
Description: The remote client is utilizing the 'YouSendIt' service. YouSendIt allows users to send
large attachments via email. YouSendIt is a web-based service. Given this, internal
corporate users can use this service to bypass outbound email security.
Family Internet Services 1079