(PVS) Signatures - Tenable Network Security

EnterpriseDB Advanced Server < 8.2.4.12 Version Detection
PVS ID: 4201 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running EnterpriseDB Advanced Server version: \n %L \n\nThis version of
EnterpriseDB is vulnerable to a remote Denial of Service attack. An attacker exploiting this
flaw would need to be able to authenticate to the database. Successful exploitation would
result in the service crashing and denying access to valid users.
Solution: Upgrade to version 8.2.4.12 or higher.
CVE-2007-4639
PHP < 5.2.4 Multiple Vulnerabilities
PVS ID: 4202 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a version of PHP prior to 5.2.4. This version of PHP is vulnerable to at least 120
distinct security flaws impacting confidentiality, integrity and availability. The reported
version of PHP is: \n %L
Solution: Upgrade to version 5.2.4 or higher.
MailMarshal <
CVE-2007-3806
PVS ID: 4203 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a directory traversal flaw.\n\nThe remote
host is running MailMarshal Mail Server version 6.2.1 or lower. There is a flaw in the
remote version of this server. An attacker can create an archive file such that upon opening,
critical system files would be overwritten with files of the attacker's choice. Successful
exploitation would result in the attacker replacing arbitrary files.
Solution: Upgrade to a version higher than 6.2.1.
CVE Not available
iTunes < 7.4.0 MP4/AAC File covr atom Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4204 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running iTunes - an application for managing and listening to music media files. The
version of iTunes client is %L. \nThis version of iTunes is vulnerable to a buffer overflow
due to the way that it processes malformed MP4/AAC files. An attacker exploiting this
Family Internet Services 1092