(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nA web browser on the remote host is affected by multiple vulnerabilities.
\n\nThe installed version of SeaMonkey is affected by various security issues :\n\n -
Several stability bugs leading to crashes that, in some cases, show traces of memory
corruption\n\n - Several file input focus stealing vulnerabilities that could result in
uploading of arbitrary files provided their full path and file names are known.\n\n - Several
issues that allow scripts from page content to escape from their sandboxed context and/or
run with chrome privileges, resulting in privilege escalation, XSS and/or remote code
execution.\n\n - A directory traversal vulnerability via the 'chrome:' URI.\n\n - A
vulnerability involving 'designMode' frames that may result in web browsing history and
forward navigation stealing.\n\n - Mis-handling of locally-saved plain text files.\n\n -
Possible disclosure of sensitive URL parameters, such as session tokens, via the .href
property of stylesheet DOM nodes reflecting the final URI of the stylesheet after following
any 302 redirects.
Solution: Upgrade to version 1.1.8 or higher.
CVE-2008-0594
Thunderbird < 2.0.0.12 Multiple Vulnerabilities
PVS ID: 4367 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe installed
version of Thunderbird is missing a critical patch. The vendor has released a patch that
addresses a number of remote vulnerabilities.
Solution: Upgrade to version 2.0.0.12 or higher.
CVE-2008-0413
Apache Tomcat < 6.0.16 Information Disclosure
PVS ID: 4368 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server can be manipulated into disclosing confidential
data.\n\nThe remote host is running a version of Tomcat server lower than 6.0.16. This
version of Tomcat is vulnerable to a flaw in the way that it handles exceptions. According
to the vendor, if an exception occurs during the processing of parameters, the parameters
may be used in future requests to disclose potentially confidential data.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2007-5333
ExtremeZ-IP Version Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4369 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Family Internet Services 1139