(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host is vulnerable to a buffer overflow\n\nAccording to it's
banner, the remote Sendmail server is running a version less than 8.13.2. There is a flaw in
versions of Sendmail less than 8.13.2 which would allow a remote attacker to execute
arbitrary code on the Sendmail system through the use of malfored X headers. The reported
version of Sendmail is: \n %L \n
Solution: Upgrade to Sendmail 8.13.2 or newer.
CVE-2009-1490
Google Chrome < 1.0.154.65 Remote Code Execution
PVS ID: 5026 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nThe version of Google Chrome installed on the remote host is earlier than
1.0.154.65. Such versions are reportedly affected by a memory corruption issue. An
attacker could exploit this flaw in order to run arbitrary code inside the Google Chrome
sandbox.\n\nFor your information, the exact browser version is: \n %L
Solution: Upgrade to Google Chrome 1.0.154.65 or newer.
CVE-2009-0945
Avira Anti-Virus PDF File Scan Evasion
PVS ID: 5027 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote client is running the Avira Anti-Virus engine. The version information of the
signature database and the core engine are: \n %L \n\nThis version of the Avira scan engine
is vulnerable to a flaw wherein attackers can bypass the scan engine by submitting specially
formatted 'PDF' files. An attacker, exploiting this flaw, would be able to pass malicious
code through the scan engine.
Solution: Upgrade to Avira scan engine 8.2.0.168/7.9.0.168
CVE Not available
Coppermine < 1.4.23 injection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5028 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a SQL Injection attack\n\nThe remote host
is running Coppermine version: \n %L \n\nCoppermine is a web-based photo album written
in PHP. This version of Coppermine is vulnerable to a SQL injection vulnerability when
handling malformed data sent to the 'thumbnails.php', 'db_input.php', and
'displayecard.php'. An attacker, exploiting this flaw, would be able to execute arbitrary
SQL commands on the database server used by Coppermine.
Family Internet Services 1331