(PVS) Signatures - Tenable Network Security

Solution: Upgrade or patch according to vendor recommendations.
CVE-2008-3290
Retrospect Backup Server < 7.6 Authentication Module Password Hash Disclosure (ESA-08-009)
PVS ID: 4607 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:33562
Description: Synopsis : \n\nThe remote Windows host has an application that is affected by an
information disclosure vulnerability.\n\nAccording to its version number, the
Authentication Module in the Retrospect Backup Server installed on the remote host uses a
weak hash algorithm to hash a user's password, which could allow a remote attacker to gain
control of a client's machine. The reported version number is: \n %L
Solution: Upgrade to version 7.6 or higher.
CVE-2008-3288
RealPlayer for Windows < 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities
PVS ID: 4608 FAMILY: Web Clients RISK: HIGH NESSUS ID:33744
Description: Synopsis :\n\nThe remote Windows application is affected by at least one security
vulnerability.\n\nAccording to its version number, the installed version of RealPlayer /
RealPlayer Enterprise on the remote Windows host suffers from possibly several issues
:\n\n - Heap memory corruption issues in several ActiveX controls can lead to arbitrary
code execution (CVE-2008-1309).\n - An unspecified local resource reference vulnerability
(CVE-2008-3064).\n - An SWF file heap-based buffer overflow (CVE-2007-5400).\n - A
buffer overflow involving the 'import()' method in an ActiveX control implemented by the
'rjbdll.dll' module could result in arbitrary code execution (CVE-2008-3066).\n\nNote that
RealPlayer 11 (builds 6.0.14.738 - 6.0.14.802) are only affected by the first issue
(CVE-2008-1309).\nNote that the vendor's advisory states that version numbers for
RealPlayer 10.5 are not sequential.
Solution: Upgrade to RealPlayer 11.0.3 (build 6.0.14.806) / RealPlayer 10.5 (build 6.0.12.1675) or
higher.
CVE-2008-3066
Passive Vulnerability Scanner (PVS) Signatures
Mozilla Thunderbird < 2.0.0.16 Multiple Vulnerabilities
PVS ID: 4609 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:33563
Description: Synopsis :\n\nThe remote Windows host contains a mail client that is affected by multiple
vulnerabilities.\n\nThe installed version of Thunderbird is affected by various security
issues :\n\n\n - Several stability bugs leading to crashes that, in some cases, show traces of
memory corruption (MFSA 2008-21).\n\n - By taking advantage of the privilege level
stored in the pre-compiled 'fastload' file, an attacker may be able to run arbitrary JavaScript
code with chrome privileges (MFSA 2008-24).\n\n - Arbitrary code execution is possible in
'mozIJSSubScriptLoader.loadSubScript()' (MFSA 2008-25).\n\n - Several function calls in
Family Internet Services 1206