(PVS) Signatures - Tenable Network Security

Ability Mail Server < 2.70 Remote Denial of Service
PVS ID: 5187 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:41644
Description: Synopsis : \n\nThe remote mail server is affected by a denial of service
vulnerability.\n\nThe remote host appears to be running Ability Mail Server < 2.70. Such
versions are potentially affected by an issue caused by an unspecified error when handling
IMAP version 4 FETCH commands. An attacker could exploit this flaw to crash the
affected service. For your information, the reported version of Ability Mail Server is: \n
%L
Solution: Upgrade to Ability Mail Server 2.70 or later.
CVE-2009-3445
VLC Media Player < 1.0.2 Multiple Buffer Overflows
PVS ID: 5188 FAMILY: Web Clients RISK: HIGH NESSUS ID:41626
Description: Synopsis : \n\nThe remote host contains an application that is vulnerable to multiple attack
vectors.\n\nThe version of VLC media player installed on the remote host that is earlier
than 1.0.2. Such versions are potentially vulnerable to a stack overflow when parsing a
MPF, ASF, or AVI file with an overly deep box structure. If an attacker can trick a user
into opening a specially crafted MP4, ASF, or AVI file with the affected application, he
may be able to execute arbitrary code subject to the user's privileges. For your information,
the reported version of VLC is: \n %L
Solution: Upgrade to VLC Media Player 1.0.2 or later.
CVE Not available
BlackBerry Dialog Box Certificate Mismatch
PVS ID: 5189 FAMILY: Mobile Devices
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is affected by a certificate mismatch vulnerability.\n\nThe
remote host is running the BlackBerry Browser. The installed version of the browser is
potentially affected by an issue wherein a malicious user could create a web site that
includes a certificate that is purposely altered using null characters in the certificate's
Common Name (CN) field to deceive a user into believing they are accessing a trusted site.
For your information, the reported version of the BlackBerry browser is: \n %L
Solution: Upgrade the browser to 4.5.0.173, 4.6.0.303, 4.6.1.309, 4.7.0.179, or 4.7.1.57
CVE-2009-3477
DB2 9.1 < Fix Pack 8 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5190 FAMILY: Database NESSUS ID:42044
Family Internet Services 1381