(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors\n\nThe installed
version of Thunderbird is earlier than 2.0.0.22. Such versions are potentially affected by the
following security issues :\n\n - Multiple remote memory corruption vulnerabilities exist
which can be exploited to execute arbitrary code in the context of the user running the
affected application. (MFSA 2009-14)\n\n - A flaw may exist where Unicode box drawing
characters are allowed in Internationalized Domain Names where they could be visually
confused with punctuation used in valid web addresses. An attacker can leverage this to
launch a phishing-type scam against a victim. (MFSA 2009-15)\n\n - A vulnerability exists
when the 'jar:' scheme is used to wrap a URI which serves the content with
'Content-Disposition: attachment'. An attacker can leverage this to subvert sites which use
this mechanism to mitigate content injection attacks. (MFSA 2009-16)\n\n - When an
Adobe Flash file is loaded via the 'view-source:' scheme, the Flash plugin misinterprets the
origin of the content as localhost. An attacker can leverage this to launch cross-site request
forger attacks. It is also possible to exploit this to place cookie-like objects on victim's
computers. (MFSA 2009-17)\n\n - A vulnerability exists which allows attackers to inject
arbitrary scripts into sites via XBL bindings. This vulnerability requires the attacker to have
the ability to embed third-party stylesheets into the site. (MFSA 2009-18)\n\n - Multiple
remote code execution vulnerabilities exist caused by the creation of documents whose URI
does not match the document's principle using XMLHttpRequest, as well as a flaw in the
'XPCNativeWrapper.ToString' '__proto__' coming from the wrong scope. (MFSA
2009-19)\n\n - A malicious MozSearch plugin could be created using a javascript: URI in
the SearchForm value. An attacker can leverage this in order to inject code into arbitrary
sites. (MFSA 2009-20)\n\n - An information disclosure vulnerability exists when saving the
inner frame of a web page as a file when the outer page has POST data associated with it.
(MFSA 2009-21)\n\n - A cross site scripting vulnerability exists when handling a Refresh
header containing a javascript: URI. (MFSA 2009-22)" );
Solution: Upgrade to Mozilla Thunderbird 2.0.0.22 or later.
CVE-2009-1840
MySQL 6.0 < 6.0.10 XPath Expression DoS
PVS ID: 5002 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:36020
Description: Synopsis : \n\nThe remote host is vulnerable to a Denial of Service (DoS) attack\n\nThe
version of MySQL 6.0 installed on the remote host is earlier than 6.0.10 and thus affected
by a denial of service vulnerability. Specifically, a user can cause an assertion failure
leading to a server crash by calling 'ExtractValue()' or 'UpdateXML()' using an XPath
expression employing a scalar expression as a 'FilterExpr'. For your information, the
reported version of MySQL is: \n %L
Solution: Upgrade to MySQL Community Server version 6.0.10 or later.
CVE-2009-0819
MySQL Community Server Version Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5003 FAMILY: Database RISK: INFO NESSUS ID:Not Available
Family Internet Services 1323