(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is missing a Mac OS X update that fixes various security
issues.\n\n The remote host is running a version of Mac OS X that is older than version
10.5.2. Mac OS X 10.5.2 contains several security fixes for a number of programs.
Solution: Upgrade to version 10.5.2 or higher.
CVE-2008-0042
WebDAV Mini Redirector Client Detection
PVS ID: 4374 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: The remote Windows client utilizes the WebDAV service via the Mini Redirector client
software version: %L
Solution: Ensure that you are running the latest version of WebDAV Mini Redirector.
CVE Not available
ClamAV < 0.92.1 Multiple Overflows
PVS ID: 4375 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running ClamAV version: %L\n\nThis version of ClamAV is vulnerable to several flaws
due to the way that it parses user-supplied input. It has been reported that there is a heap
overflow within the 'mew.c' file. It has further been reported that there is an integer
overflow in the 'cli_scanpe' function of the 'pe.c' file. An attacker exploiting these flaws
would either crash the service or execute arbitrary code on the remote machine.
Solution: Upgrade to version 0.92.1 or higher.
CVE-2008-0318
Apache mod_jk2 < 2.0.4 Multiple Overflows
PVS ID: 4376 FAMILY: Web Servers RISK: HIGH NESSUS ID:31786
Description: Synopsis :\n\nThe remote host is affected by multiple buffer overflow
vulnerabilities.\n\nThe remote host is running Apache web server with mod_jk2, a
connector that connects a web server such as Apache. According to its banner, the version
of mod_jk2 installed is affected by multiple buffer overflow vulnerabilities. An attacker
may be able to exploit these vulnerabilities to cause a denial-of-service condition or execute
arbitrary code subject to the privileges of the user running the Apache process.
Solution: Upgrade to version 2.0.4 or higher.
CVE-2007-6258
WinIPDS Version Detection
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1141