(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote client is running the Avira Anti-Virus engine. The version information of the
signature database and the core engine are: \n %L \n\nThis version of the Avira scan engine
is vulnerable to a flaw wherein attackers can bypass the scan engine by submitting specially
formatted 'ZIP', 'CAB', 'RAR', or 'LH' files. An attacer, exploiting this flaw, would be able
to pass malicious code through the scan engine.
Solution: Upgrade to Avira scan engine 7.9.0.180/8.2.0.180
CVE Not available
Simple Machines < 1.1.9 / 2.0.0 RC1 XSS
PVS ID: 5039 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a cross-site scripting attack.\n\nThe remote
host is running Simple Machines Forum. The installed version is earlier than 1.1.9 / 2.0.0
RC1-1. Such versions fail to properly sanitize user-supplied images identified as
'image/bmp' MIME types. Successful exploitation would result in an attacker executing
script code within the browsers of other users. For your information, the reported version of
Simple Machines Forum is: \n %L
Solution: Upgrade to Simple Machines Forum 1.1.9 / 2.0.0 RC1-1
CVE Not available
NSD packet.c Off-By-One Buffer Overflow
PVS ID: 5040 FAMILY: DNS Servers
RISK:
MEDIUM
NESSUS ID:38850
Description: Synopsis : \n\nThe remote DNS server is vulnerable to a remote buffer overflow
attack.\n\nThe remote host is running a version of NSD DNS Server which has a stack
buffer overflow vulnerability. A remote attacker could overwrite one byte in memory,
leading to a denial of service. It is possible, but unlikely, that this vulnerability could result
in remote code execution. For your information, the reported version of NSD is: \n %L
Solution: Upgrade to NSD version 3.2.2 or later, or apply the patch referenced in the vendor's
advisory.
CVE Not available
iTunes < 8.2 Remote Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5041 FAMILY: Web Clients RISK: HIGH NESSUS ID:38986
Description: Synopsis : \n\nThe remote host is vulnerable to a remote buffer overflow
attack.\n\nAccording to its banner, the version of iTunes installed on the remote host is
older than 8.2. Such versions may be affected by a remote buffer overflow when parsing
'items: ' URLs. An attacker could exploit this flaw to execute arbitrary code on the remote
Family Internet Services 1335