(PVS) Signatures - Tenable Network Security

Description: The remote host is an NFS server hosting the following file:\n%P
Solution: N/A
realtimeonly
CVE Not available
Firefox < 3.0.11 Multiple Vulnerabilities
PVS ID: 5072 FAMILY: Web Clients RISK: HIGH NESSUS ID:39372
Description: Synopsis : \n\nThe remote host contains a web browser that is susceptible to multiple attack
vectors.\n\nThe installed version of Firefox is earlier than 3.0.11. Such versions are
potentially affected by the following security issues : \n\n - Multiple memory corruption
vulnerabilities could potentially be exploited to execute arbitrary code. (MFSA
2009-24)\n\n - Certain invalid Unicode characters, when used as a part of IDN, can be
displayed as a whitespace in the location bar. An attacker can exploit this vulnerability to
spoof the location bar. (MFSA 2009-25)\n\n - It may be possible for local resources loaded
via 'file: ' protocol to access any domain's cookies saved on a user's system. (MFSA
2009-26)\n\n - It may be possible to tamper with SSL date via non-200 responses to proxy
CONNECT requests. (MFSA 2009-27)\n\n - A race condition exists in
'NPObjWrapper_NewResolve' when accessing the properties of a NPObject, a wrapped
JSObject. (MFSA 2009-28)\n\n - If the owner document of an element becomes a null after
garbage collection, then it may be possible to execute the event listeners within the wrong
JavaScript context. An attacker can potentially exploit this vulnerability to execute arbitrary
JavaScript with chrome privileges. (MFSA 2009-29)\n\n - When the 'file: ' resource is
loaded from the location bar, the resource inherits principal of the previously loaded
document. This could potentially allow unauthorized access to local files.
(MFSA-2009-30)\n\n - While loading external scripts into XUL documents content-loading
policies are not checked. (MFSA 2009-31)\n\n - It may also be possible for scripts from
page content to run with elevated privileges. (MFSA 2009-32)\n\n For your information,
the reported version of Firefox is : \n %L
Solution: Upgrade to Firefox 3.0.11 or later.
CVE-2009-1841
ClamAV < 0.95.2 File Scan Evasion
PVS ID: 5073 FAMILY: Web Clients
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is running an anti-virus application that is affected by a file
scan evasion vulnerability.\n\nAccording to its version, the clamd anti-virus daemon on the
remote host is earlier than 0.95.2. Such versions are reportedly affected by a file scan
evasion vulnerability. An attacker could exploit this flaw by embedding malicious code in a
specially crafted 'CAB', 'RAR', or 'ZIP' archive in order to bypass the anti-virus software.
For your information, the reported version of ClamAV on the remote host is: \n %L
Family Internet Services 1344