(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote Windows host has a program that allows arbitrary file
access.\n\n According to its version, the installation of WinSCP on the remote host fails to
completely sanitize input to the SCP and SFTP protocol handlers. If an attacker can trick a
user on the affected host into clicking on a malicious link, he may be able to initiate a file
transfer to or from the affected host. The reported version of WinSCP is: \n %L
Solution: Upgrade to version 4.0.4 or higher.
CVE-2007-4909
AOL Instant Messenger <
PVS ID: 4215 FAMILY: Internet Messengers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a script injection attack.\n\nThe remote
client is running AOL Instant Messenger version: %L\nThis version of AIM is vulnerable
to a flaw where script code can be injected and executed by a malicious user. To exploit
this flaw, an attacker would only need to be able to send a message to an unsuspecting user.
Successful exploitation would result in the attacker executing arbitrary script code.
Solution: Upgrade to a version higher than 6.1.41.2.
CVE-2007-4901
OpenOffice < 2.3 TIFF Parser Multiple Overflows
PVS ID: 4216 FAMILY: Generic RISK: HIGH NESSUS ID:26064
Description: The remote Windows host has a program that is affected by multiple buffer overflow
vulnerabilities. The remote host is running a version of OpenOffice.org that is affected by
multiple integer overflows in its TIFF document parser that can be triggered when parsing
tags in TIFF directory entries. If a remote attacker can trick a user into opening a
specially-crafted TIFF document, he may be able to leverage this issue to execute arbitrary
code on the remote host subject to the user's privileges.
Solution: Upgrade to version 2.3 or higher.
CVE-2007-2834
Merak Mail < 9.0.0 BODY Element HTML Injection
PVS ID: 4217 FAMILY: SMTP Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML injection attack.\n\nThere is a
flaw in this version of Merak mail server. Specifically, the application fails to filter out
dangerous script input to email. An attacker may be able to execute arbitrary code when the
user accesses Merak via the webmail interface. Successful exploitation would result in the
attacker executing code in the remote client browser.
Family Internet Services 1096