(PVS) Signatures - Tenable Network Security

Solution: N/A
CVE Not available
PHP < 5.2.9 Multiple Vulnerabilities
PVS ID: 4943 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:35750
Description: Synopsis :\n\nThe remote web server uses a version of PHP that is affected by multiple
flaws.\n\nAccording to its banner, the version of PHP installed on the remote host is older
than 5.2.9. Such versions may be affected by several security issues :\n\n - Background
color is not correctly validated with a non-true color image in function 'imagerotate()'.
(CVE-2008-5498)\n\n - A denial of service condition can be triggered by trying to extract
zip files that contain files with relative paths in file or directory names.\n\n - Function
'explode()' is affected by an unspecified vulnerability.\n\n - It may be possible to trigger a
segfault by passing a specially crafted string to function 'json_decode()'.\n\n - Function
'xml_error_string()' is affected by a flaw that results in messages being off by one." );
Solution: Upgrade to version 5.2.9 or higher.
CVE-2008-5498
eDirectory < 8.8 SP3 FTF3 iMonitor Crafted HTTP Request Overflow
PVS ID: 4944 FAMILY: Generic RISK: HIGH NESSUS ID:35760
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running eDirectory, a directory service software from Novell. The iMonitor component
included with the installed version is affected by a buffer overflow vulnerability. By
sending a specially crafted HTTP request to the iMonitor component with a malformed
'Accept-Language' header, it may be possible for a remote attacker to execute arbitrary
code on the remote system. \n\nNOTE: The iMonitor service is an optional package. PVS
has determined this vulnerability by looking at the vendor version number within LDAP
queries. Given this, if the iMonitor service is not running, then the system is not vulnerable.
The reported version of eDirectory was: %L
Solution: Upgrade to version 8.8 SP3 with FTF3 or higher.
CVE Not available
Opera < 9.64 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4945 FAMILY: Web Clients RISK: HIGH NESSUS ID:35761
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe version of
Opera installed on the remote host is earlier than 9.64 and is reportedly affected by multiple
issues :\n\n - A memory corruption vulnerability when processing specially crafted JPEG
files could allow an attacker to execute arbitrary code with the privileges of the affected
application. (926)\n\n - It may be possible for certain plugins to execute arbitrary code in
Family Internet Services 1305