(PVS) Signatures - Tenable Network Security

version of Google Chrome is : \n %L
Solution: Upgrade to Google Chrome 1.0.154.53 or later.
CVE-2009-2071
PHP < 5.2.10 Multiple Vulnerabilities
PVS ID: 5080 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote web server uses a version of PHP that is affected by multiple
vulnerabilities.\n\nAccording to its banner, the version of PHP installed on the remote host
is earlier than 5.2.10. Such versions are reportedly affected by multiple vulnerabilities : \n\n
- A restriction-bypass vulnerability could allow the execution of arbitrary commands when
'safe_mode' is enabled 'safe_mode_exec_dir' is not set. This issue only affects PHP on
Windows. (bug 45997)\n\n - A denial of service vulnerability is triggered when an
application processes a 'JPEG' image file through a call to the 'exif_read_data()' function.
(bug 48378).\n\nFor your information, the reported version of PHP is : \n %L
Solution: Upgrade to PHP version 5.2.10 or later.
CVE-2009-2687
Microsoft .NET Hidden 'ViewState' Detection
PVS ID: 5081 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote .NET application stores state information within a hidden form field. Further,
the information is not hashed. Given this, an attacker can modify the ViewState string in
transit and possibly alter the state or output of the .NET application. The path to the
application is: %P
Solution: Enable hashing of the ViewState string. This can be accomplished by setting
'enableViewStateMac
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Google Chrome < 2.0.172.33 Buffer Overflow vulnerability
PVS ID: 5082 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host contains a web browser that is vulnerable to a buffer
overflow attack.\n\nThe version of Google Chrome installed on the remote host is earlier
than 2.0.172.33. Such versions are reportedly affected by a buffer overflow vulnerability
when handling certain responses from HTTP servers. An attacker could exploit this issue to
cause a denial of service, or execute arbitrary code with the privileges of the logged on
user. For you information, the reported version is : \n %L
Solution: Upgrade to Google Chrome 2.0.172.33 or later.
Family Internet Services 1347