(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack\n\nThe
version of BIND installed on the remote host suggests that it suffers from a denial of
service vulnerability, which may be triggered by sending a malicious dynamic update
message to a zone for which the server is the master, even if that server is not configured to
allow dynamic updates. Note that PVS obtained the version by observing the response to a
'version.bind', the value of which can be and sometimes is tweaked by DNS administrators.
Solution: Upgrade to BIND 9.4.3-P3 / 9.5.1-P3 / 9.6.1-P3 or later
CVE-2009-0696
Squid 3.0.STABLE16 / 3.10.11 Remote DoS
PVS ID: 5108 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:40420
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS)
attack\n\nAccording to its banner, the version of the Squid proxy caching server installed
on the remote host is older than 3.0.STABLE17 or 3.1.0.12. Such versions reportedly use
incorrect bounds checking when processing some requests or responses. Squid-2.x releases
are not vulnerable.
Solution: Either upgrade to Squid version 3.0.STABLE17 or 3.1.0.12 or later or apply the patch
referenced in the project's advisory above.
CVE-2009-2622
Adobe AIR < 1.5.2 Multiple Vulnerabilities (APSB09-10)
PVS ID: 5109 FAMILY: Web Clients RISK: HIGH NESSUS ID:40447
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors\n\nThe remote
Windows host contains a version of Adobe AIR Player that is earlier than 1.5.2. Such
versions are reportedly affected by multiple vulnerabilities :\n\n - A memory corruption
vulnerability that could potentially lead to code execution. (CVE-2009-1862)\n\n - A
privilege escalation vulnerability that could potentially lead to code execution.
(CVE-2009-1863)\n\n - A heap overflow vulnerability that could potentially lead to code
execution. (CVE-2009-1864)\n\n - A null pointer vulnerability that could potentially lead to
code execution. (CVE-2009-1865)\n\n - A stack overflow vulnerability that could
potentially lead to code execution. (CVE-2009-1866)\n\n - A clickjacking vulnerability that
could allow an attacker to lure a web browser user into unknowingly clicking on a link or
dialog. (CVE-2009-1867)\n\n - A URL parsing heap overflow vulnerability that could
potentially lead to code execution. (CVE-2009-1868)\n\n - An integer overflow
vulnerability that could potentially lead to code execution. (CVE-2009-1869)\n\n - A local
sandbox vulnerability that could potentially lead to information disclosure when SWFs are
saved to the hard drive. CVE-2009-1870)
Solution: Upgrade to Adobe AIR version 1.5.2 or later."
CVE-2009-1870
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1356