(PVS) Signatures - Tenable Network Security

PVS ID: 4980 FAMILY: Web Clients RISK: HIGH NESSUS ID:36045
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe installed
version of Firefox is earlier than 3.0.8. Such versions are potentially affected by the
following security issues : \n\n - An XSL transformation vulnerability can be leveraged
with a specially crafted stylesheet to crash the browser or to execute arbitrary code. (MFSA
2009-12)\n\n - An error in the XUL tree method '_moveToEdgeShift()' can be leveraged to
trigger garbage collection routines on objects that are still in use, leading to a browser crash
and possibly execution of arbitrary code. (MFSA 2009-13) \n\nThe reported version of
Firefox is: \n %L
Solution: Upgrade to version 3.0.8 or higher.
CVE-2009-1169
Xlight FTP Server Authentication SQL Injection
PVS ID: 4981 FAMILY: FTP Servers RISK: HIGH NESSUS ID:36051
Description: Synopsis : \n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe version of
Xlight FTP installed on the remote host is vulnerable to a SQL injection attack during
login. This allows an attacker to execute arbitrary SQL commands in the context of the FTP
server. Installations that are not using external ODBC authentication are not affected by
this vulnerability. The reported version of Xlight is: \n %L
Solution: Upgrade to version 3.2.1 or higher.
CVE-2009-4795
ClamAV < 0.95 Scan Evasion
PVS ID: 4982 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:36075
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nAccording
to its version, the clamd antivirus daemon on the remote host is earlier than 0.95. Such
versions fail to handle certain malformed 'RAR' archive files, and hence it may be possible
for certain archive files to evade detection from the scan engine.
Solution: Upgrade to version 0.95 or higher.
CVE-2009-1241
Atlassian JIRA < 3.13.3 Multiple Vulnerabilities
PVS ID: 4983 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Family Internet Services 1316