(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host is vulnerable to a security bypass flaw.\n\nThe remote host
is running Simple Machines Forum (SMF), a web forum. This version of SMF is
vulnerable to a flaw where attackers can bypass security filtering by surrounding the
content with an incomplete BBcode block. Successful exploitation would result in the
attacker posting banned content within the web content. The reported version of SMF is: \n
%L \n
Solution: Upgrade to version 1.1.7 or higher.
CVE Not available
eDirectory < 8.7.3 SP10 FTF1 Multiple Vulnerabilities
PVS ID: 4704 FAMILY: Generic RISK: HIGH NESSUS ID:34349
Description: Synopsis :\n\nThe remote directory service is affected by multiple vulnerabilities.\n\n The
remote host is running eDirectory, a directory service software from Novell. The installed
version of Novell eDirectory is affected by multiple heap overflows and denial of service
vulnerabilities :\n\n - DS module is affected by two heap overflow vulnerabilities (Bugs
407275, 407256).\n - EMBOX module is affected by two denial of service vulnerabilities
(Bugs 407243, 407245).
Solution: Upgrade to eDirectory 8.7.3 SP10 FTF1 or higher.
CVE-2008-5038
Trend Micro OfficeScan < 7.3 Build 3172 Client Traversal Arbitrary File Access
PVS ID: 4705 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:34362
Description: Synopsis : \n\nThe remote web server is affected by a directory traversal issue.\n\n The
version of Trend Micro OfficeScan client running on the remote host is affected by a
directory traversal issue, which can be leveraged by an unauthenticated remote attacker to
read arbitrary files on the remote host. Note that successful exploitation requires that
'Tmlisten.exe' be configured to receive updates from other clients. The reported version of
OfficeScan is: \n %L
Solution: Upgrade to version 7.3 Build 3172 or higher.
CVE-2008-2439
Opera < 9.60 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4706 FAMILY: Web Clients RISK: HIGH NESSUS ID:34368
Description: Synopsis :\n\nThe remote host contains a web browser that is affected by several
issues.\n\nThe version of Opera installed on the remote host is earlier than 9.60 and is
reportedly affected by several issues :\n - Specially crafted URLs can cause Opera to crash
or allow arbitrary code execution.\n - Once a Java applet has been cached, a page that can
predict the cache path for that applet can load it from cache thereby causing it to run in the
Family Internet Services 1236