(PVS) Signatures - Tenable Network Security

the ability to embed third-party stylesheets into the site. (MFSA 2009-18)\n\n - Multiple
remote code execution vulnerabilities exist caused by the creation of documents whose URI
does not match the document's principle using XMLHttpRequest, as well as a flaw in the
'XPCNativeWrapper.ToString' '__proto__' coming from the wrong scope. (MFSA
2009-19)\n\n - A malicious MozSearch plugin could be created using a JavaScript: URI in
the SearchForm value. An attacker can leverage this in order to inject code into arbitrary
sites. (MFSA 2009-20)\n\n - An information disclosure vulnerability exists when saving the
inner frame of a web page as a file when the outer page has POST data associated with it.
(MFSA 2009-21)\n\n - A cross site scripting vulnerability exists when handling a Refresh
header containing a JavaScript: URI. (MFSA 2009-22)" );
Solution: Upgrade to version 3.0.9 or higher.
NTOP <
CVE-2009-1312
PVS ID: 4999 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a local flaw in the way that it creates log
files.\n\nThe remote host is running NTOP, a tool for viewing network configuration,
usage, statistics, protocols and more via a web interface. This version of NTOP is reported
to be prone to a local exploit. Specifically, a local attacker can overwrite the 'access' log
file. The remote host is only vulnerable if the NTOP service has been started with the
'--access-log-file' and '-d' option. The reported version of NTOP is: \n %L \n
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
BlackBerry Enterprise Server < 4.1.6 MR5 XSS
PVS ID: 5000 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
remote host is running the Blackberry Enterprise Server version: \n %L \n\nThis version is
reportedly vulnerable to a cross-site scripting flaw due to the way that it handles
user-supplied input. An attacker exploiting this flaw would need to be able to convince a
user to click on a link. Successful exploitation would result in the attacker executing
arbitrary script code within the browser of the user. \nIAVT Reference :
2009-T-0023\nSTIG Finding Severity : Category II
Solution: Upgrade to version 4.1.6 MR5 (4.1.6.5) or higher.
CVE-2009-0307
Passive Vulnerability Scanner (PVS) Signatures
Mozilla Thunderbird < 2.0.0.21 Multiple Vulnerabilities
PVS ID: 5001 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Family Internet Services 1322