27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

CVE-2008-0383<br />

Winamp < 5.52 Ultravox Streaming Metadata Parsing Buffer Overflows<br />

<strong>PVS</strong> ID: 4347 FAMILY: Generic RISK: HIGH NESSUS ID:29998<br />

Description: Synopsis :\n\nThe remote Windows host contains a multimedia application that is affected<br />

by multiple buffer overflow vulnerabilities.\n\nThe remote host is using Winamp, a popular<br />

media player for Windows. The version of Winamp installed on the remote Windows host<br />

reportedly contains two stack-based buffer overflows in 'in_mp3.dll' when parsing Ultravox<br />

streaming metadata that can be triggered by overly-long '' and '' tag values.<br />

If an attacker can trick a user on the affected host into opening a specially-crafted file, he<br />

may be able to leverage this issue to execute arbitrary code on the host subject to the user's<br />

privileges.<br />

Solution: Upgrade to version 5.52 or higher.<br />

BoastMachine <<br />

CVE-2008-0065<br />

<strong>PVS</strong> ID: 4348 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe<br />

remote host is running BoastMachine, a blogging software, version %L.\nThis<br />

version of BoastMachine is vulnerable to a flaw in the mail.php script. Specifically,<br />

a remote user can pass arbitrary SQL commands to the mail.php script that would<br />

then be executed on the database server.<br />

Solution: Upgrade to a version higher than 3.1.<br />

CVE-2008-0422<br />

WebSphere serveServletsByClassnameEnabled Unspecified Vulnerability<br />

<strong>PVS</strong> ID: 4349 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available<br />

Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe<br />

remote host is a WebSphere application server. The reported version number is '%L'.\nThis<br />

version is reported to be vulnerable to a flaw in the serveServletsByClassnameEnabled<br />

module. While the details of this flaw are currently unknown, the vendor has released a fix.<br />

Solution: Upgrade or patch according to vendor recommendations.<br />

CVE-2008-0389<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

WebSphere serveServletsByClassnameEnabled Unspecified Vulnerability<br />

<strong>PVS</strong> ID: 4350 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available<br />

Family Internet Services 1133

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!