(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host is affected by a buffer overflow vulnerability.\n\nThe
remote host is running Pidgin 2.5.9. Such versions reportedly trigger an memcpy to an
invalid location in memory when receiving two consecutive specially crafted SLP message.
For your information, the reported version of Pidgin is: \n %L
Solution: Upgrade to Pidgin 2.5.9 or later.
CVE-2009-2694
Buildbot < 0.7.11p3 Multiple Cross-site Scripting Vulnerabilities
PVS ID: 5138 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Buildbot, a software project to automate the compile test cycle for software
projects. The installed version is earlier than 0.7.11p3. Such versions are potentially
affected by multiple cross-site scripting vulnerabilities. For your information, the reported
version of Buildbot was: \n %L
Solution: Upgrade to Buildbot 0.7.11p3 or later.
CVE-2009-2967
TortoiseSVN < 1.5.6 / 1.6.0-1.6.3 Multiple Integer Overflows
PVS ID: 5139 FAMILY: Generic RISK: HIGH NESSUS ID:40620
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe installed
version of the TortoiseSVN is affected by multiple heap overflow issues. Specifically, the
'libsvn_delta' library fails to perform sufficient boundary checks before processing certain
svndiff streams. An attacker with commit access to a vulnerable Subversion server could
exploit this vulnerability from a Subversion client to trigger a heap overflow on the server.
Typically such an attack would result in a denial of service condition or arbitrary code
execution. An attacker could also trigger this issue from a rogue Subversion server on a
Subversion client in response to a checkout or update request. For your information, the
reported version of TortoiseSVN is: \n %L
Solution: Upgrade to TortoiseSVN 1.5.7/1.6.4 or later.
CVE-2009-2411
Passive Vulnerability Scanner (PVS) Signatures
SVN < 1.5.6 / 1.6.0-1.6.3 Multiple Integer Overflows
PVS ID: 5140 FAMILY: Generic RISK: HIGH NESSUS ID:40620
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe installed
version of SVN is affected by multiple heap overflow issues. Specifically, the 'libsvn_delta'
library fails to perform sufficient boundary checks before processing certain svndiff
streams. An attacker with commit access to a vulnerable Subversion server could exploit
this vulnerability from a Subversion client to trigger a heap overflow on the server.
Family Internet Services 1365