(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host is affected by multiple remote buffer overflow
vulnerabilities.\n\nThe remote host is running Pidgin earlier than 2.5.6. Such versions are
reportedly affected by multiple remote buffer overflow vulnerabilities : \n\n - A buffer
overflow issue in the 'decrypt_out()' function can be exploited through specially crafted
'QQ' packets. (CVE-2009-1374)\n\n - A buffer maintained by PurpleCircBuffer which is
used by XMPP and Sametime protocol plugins can be corrupted if it's exactly full and then
more bytes are added to it. (CVE-2009-1375)\n\n - A buffer overflow is possible when
initiating a file transfer to a malicious buddy over XMPP. (CVE-2009-1373)\n\n - An
integer-overflow issue exists in the application due to a n incorrect typecasting of 'int64' to
'size_t'. (CVE-2009-1376)\n\nSuccessful exploitation could allow an attacker to execute
arbitrary code on the remote host.For your information, the installed version of Pidgin is: \n
%L
Solution: Upgrade to Pidgin 2.5.6 or later.
BASE < 1.4.3 XSS
CVE-2009-1376
PVS ID: 5033 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to an HTML Injection attack\n\nThe remote
host is running BASE, a web-based tool for analyzing alerts from one or more SNORT
sensors. The version of BASE installed on the remote host allows a remote attacker to
inject HTML and perform cross-site scripting (XSS) attacks against unsuspecting users. In
order to inject the malicious code, the attacker would need the ability to log into the BASE
system. Successful exploitation would result in the attacker executing script code within the
browser of other BASE users. The two php scripts which are vulnerable to injection are:
'base_ag_main.php' and 'base_qry_main.php'. For your information, the reported version of
BASE is: \n %L
Solution: Upgrade to BASE version 1.4.3 or later.
CVE Not available
SoulSeek Version Detection
PVS ID: 5034 FAMILY: Peer-To-Peer File Sharing RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the SoulSeek Peer to Peer application. SoulSeek is used to
download and share files. As such, it should be authorized with respect to corporate
policies and guidelines. The version of SoulSeek is: \n %L
Solution: N/A
CVE Not available
lighttpd < 1.4.24 Information Disclosure
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1333