(PVS) Signatures - Tenable Network Security

CVE Not available
WS_FTP Server < 6.1.1 Multiple Vulnerabilities
PVS ID: 4361 FAMILY: FTP Servers RISK: HIGH NESSUS ID:40771
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThis host is
running a vulnerable version of WS_FTP FTP server. Versions up to and including 6.1.0
are reported prone to multiple flaws:\n\n - A vulnerability caused by an improper handling
of UDP packets within the FTP log server. An attacker can exploit this to crash the affected
service. (CVE-2008-0608)\n\n - A buffer overflow vulnerability in the SSH server service
when handling arguments to the 'opendir' command. (CVE-2008-0590)\n\n - An
information disclosure vulnerability when processing HTTP requests for the
'FTPLogServer/LogViewer.asp' script. An attacker can exploit this to gain access to the log
viewing interface. (CVE-2008-5692)\n\nThe reported version of WS_FTP is\n%L
Solution: Upgrade to version 6.1.1 or higher.
CVE-2008-5693
iPhoto < 7.1.2 Photocast Subscription Format String
PVS ID: 4362 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:30201
Description: Synopsis :\n\nThe remote Mac OS X host contains an application that is affected by a
format string vulnerability.\n\nThe remote host is running a version of iPhoto older than
version 7.1.2. Such versions are reportedly affected by a format string vulnerability. If an
attacker can trick a user on the affected host into subscribing to a specially-crafted
photocast, he may be able to leverage these issues to execute arbitrary code on the affected
host subject to the user's privileges.
Solution: Upgrade to version 7.1.2 or higher.
CVE-2008-0043
QuickTime < 7.4.1 RTSP Response Handling Overflow
PVS ID: 4363 FAMILY: Web Clients RISK: HIGH NESSUS ID:30204
Description: Synopsis :\n\nThe remote Windows host contains an application that is affected by a buffer
overflow vulnerability.\n\nThe version of QuickTime installed on the remote Windows host
is older than 7.4.1. Such versions contain a heap buffer overflow in the application's
handling of HTTP responses when RTSP tunneling is enabled. If an attacker can trick a
user to visit a specially-crafted webpage, he may be able to to execute arbitrary code on the
remote host subject to the user's privileges.
Solution: Upgrade to version 7.4.1 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1137