(PVS) Signatures - Tenable Network Security

Description: The remote host is running an Interbase database server. The version is: '%L'
Solution: N/A
CVE Not available
Interbase Database Remote Stack Overflow
PVS ID: 4514 FAMILY: Database RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is
running an Interbase database server. The version is: '%L'. This version has been reported
vulnerable to a remote buffer overflow. An attacker, exploiting this flaw, would only need
to be able to connect to the database service port (3050/tcp by default). Successful
exploitation would result in the attacker executing arbitrary code.
Solution: The issue has been fixed in version 8.1.0.2578 which is available from the vendor website.
CVE-2008-2559
Trillian < 3.1.10.0 Multiple Vulnerabilities
PVS ID: 4515 FAMILY: Internet Messengers RISK: HIGH NESSUS ID:32400
Description: Synopsis :\n\nThe remote host contains an instant messaging application that is affected by
several vulnerabilities.\n\nThe version of Trillian installed on the remote host reportedly
contains several vulnerabilities :\n\n - A stack buffer overflow in 'aim.dll' triggered when
parsing messages with overly long attribute values within the 'FONT' tag.\n - A memory
corruption issue within XML parsing in 'talk.dll' triggered when processing malformed
attributes within an 'IMG' tag. \n - A stack buffer overflow in the header-parsing code for
the MSN protocol when processing the 'X-MMS-IM-FORMAT' header.\n\nSuccessful
exploitation of each issue can result in code execution subject to the privileges of the
current user.
Solution: Upgrade to Trillian 3.1.10.0 or later as it is reported to resolve these issues.
CVE-2008-2409
MDAP Service Detection
PVS ID: 4516 FAMILY: Generic RISK: INFO NESSUS ID:32399
Description: Synopsis :\n\nA network service is listening on the remote host.\n\nThe remote service
supports the Multi Directory Access Protocol (MDAP), which is used to multicast
commands to certain types of network devices, such as Thompson ADSL modems.
Solution: Limit incoming traffic to this port if desired.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1179