(PVS) Signatures - Tenable Network Security

of WebSphere is: \n %L
Solution: Apply Fix Pack 5 (7.0.0.5) or later.
CVE-2009-2092
Altiris Deployment Solution < 6.9.430 Multiple Vulnerabilities
PVS ID: 5143 FAMILY: Generic RISK: HIGH NESSUS ID:43828
Description: Synopsis : \n\nThe remote Windows host is vulnerable to multiple attack vectors.\n\nThe
version of Altiris Deployment Solution installed on the remote host is earlier than 6.9 SP3
Build 430. Such versions are potentially affected by multiple issues : \n\n - An
authentication bypass vulnerability when 'DBManager' authentication is used.\n\n - An
authentication-bypass vulnerability caused by a race condition when files are transfered
from the server to a client.\n\n A local privilege escalation vulnerability in the 'Aclient'
client GUI. \n\n - A race-condition exists in the 'AClient' client application that an attacker
can exploit to execute malicious commands with SYSTEM-level privileges. \n\nFor your
information, the reported version of Altiris Deployment Solution is: \n %L
Solution: Upgrade to Altiris Deployment Solution 6.9 SP3 Build 430
CVE-2009-3109
FlexCMS < 3.0 'CookieUsername' Parameter SQL Injection
PVS ID: 5144 FAMILY: CGI RISK: HIGH NESSUS ID:40824
Description: Synopsis : \n\nThe remote host is vulnerable to a SQL injection attack.\n\nThe remote host
is running FlexCMS, a content management system written in PHP. The installed version
of FlexCMS is earlier than 3.0. Such versions are potentially affected by a SQL injection
vulnerability in the 'CookieUsername' cookie parameter. An attacker, exploiting this flaw,
may be able to compromise the application. Note, that this requires magic_quotes_gpc to be
turned off.\n\nFor your information, the reported version of FlexCMS was: \n %L
Solution: Upgrade to FlexCMS 3.0 or later.
CVE Not available
OpenOffice < 3.1.1 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5145 FAMILY: Generic RISK: HIGH NESSUS ID:40826
Description: Synopsis : \n\nThe remote host has a program that is vulnerable to multiple attack
vectors.\n\nThe version of OpenOffice is earlier than 3.1.1. Such versions are potentially
affected by several issues : \n\n - A boundary error when parsing certain records can be
exploited to cause a heap-based buffer overflow via a specially crafted document.
(CVE-2009-0201)\n\n - An integer underflow error when parsing certain records in the
document table. (CVE-2009-0200)\n\n - A vulnerability in the parser of EMFS files can
lead to the execution of arbitrary commands. (CVE-2009-2139)\n\nFor your information,
the reported version of OpenOffice is: \n %L
Family Internet Services 1367