(PVS) Signatures - Tenable Network Security

CVE-2008-3629
MySQL Empty Binary String DoS
PVS ID: 4652 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running MySQL database version: %L\n\nThis version of MySQL is
vulnerable to a remote Denial of Service (DoS) attack when it processes empty binary
strings. An attacker exploiting this flaw would need some way of injecting data into a
MySQL query. Successful exploitation would result in the database crashing.
Solution: Upgrade to version 5.0.66, 5.1.26, 6.0.6 or higher.
CVE-2008-3963
iTunes < 8.0 Multiple Vulnerabilities
PVS ID: 4653 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running iTunes, an application for managing and listening to music media files. The
version of iTunes is '%L'.\n\nThis version of iTunes is vulnerable to a several local flaws.
The first involves an integer overflow and would result in the local attacker executing
arbitrary code with the privileges of the iTunes program. The second flaw involves
misleading firewall messages that may lead to a false sense of security.
Solution: Upgrade to version 8.0 or higher.
CVE-2008-3636
Apple iPod Device Detection
PVS ID: 4654 FAMILY: Mobile Devices RISK: INFO NESSUS ID:Not Available
Description: The remote device is an Apple iPod. iPod is a multimedia hardware application that allows
users to store files of various formats on the device.
Solution: Ensure that such devices are authorized according to corporate policies and guidelines.
CVE Not available
MyBB < 1.4.1 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4655 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe version of
MyBB installed on the remote host is vulnerable to a number of vulnerabilities. The
application fails to properly parse and sanitize data sent to the 'misc.php', 'usercp2.php',
'inc/functions_online.php', and 'moderation.php' scripts. The details of these flaws are
Family Internet Services 1220