(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote Windows host contains a media player that is affected by several
vulnerabilities.\n\nThe version of VLC Media Player installed on the remote host is
reportedly affected by several security issues :\n\n - A subtitle buffer overflow
(CVE-2007-6681).\n - A Real RTSP code execution problem (CVE-2008-0073).\n - MP4
integer overflows (CVE-2008-1489).\n - A cinepak integer overflow.
Solution: Upgrade to version 0.8.6f or higher.
CVE-2007-6682
VLC Media Player Detection
PVS ID: 4430 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the VLC Media Player version %L. VLC is a multimedia player
that is used to view movies or listen to audio.
Solution: Ensure that such usage is in alignment with corporate policies and guidelines.
NetWin SurgeMail <
CVE Not available
PVS ID: 4431 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running NetWin SurgeMail, a mail server application. The remote version of this software
is vulnerable to a remote buffer overflow in its IMAP component and exploit code was
released. Specifically, a malformed 'LIST' command can cause the application to fail,
possibly executing arbitrary code. An attacker exploiting this flaw would need the ability to
authenticate as a valid user.
Solution: Upgrade to a version higher than 3.8k4-4.
CVE-2008-1497
F-Secure Multiple Products Unspecified Code Execution
PVS ID: 4432 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the F-Secure antivirus software package. This version of F-Secure is vulnerable to
a content-parsing flaw in the way that it handles malformed files. An attacker exploiting
these flaws would be able to crash the remote firewall/antivirus software or possibly
execute arbitrary code.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2008-1412
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1156