(PVS) Signatures - Tenable Network Security

MS09-061: Vulnerabilities in the Microsoft .NET Framework 3.5.1 Common Language Runtime
Could Allow Remote Code Execution (974378)
PVS ID: 5224 FAMILY: Web Servers RISK: HIGH NESSUS ID:42117
Description: Synopsis :\n\nThe remote .NET Framework 3.5.1 is vulnerable to remote code execution
attacks.\n\nThe remote host is running a version of the .NET Framework 3.5.1 which is
potentially affected by multiple vulnerabilities :\n\n - A remote code execution
vulnerability exists in the Microsoft .NET Framework that could allow a malicious
Microsoft .NET Framework application to obtain a managed pointer to stack memory that
is no longer used. (CVE-2009-0090)\n\n - A remote code execution vulnerability exists in
the Microsoft .NET Framework that could allow a malicious Microsoft .NET application to
bypass a type equality check. (CVE-2009-0091)\n\n - A remote code execution
vulnerability exists in the Microsoft .NET Framework that can allow a malicious Microsoft
.NET application to modify memory of the attacker's choice. (CVE-2009-2497)\n\nFor
your information, the observed version of Microsoft .NET is\n%L
Solution: Apply the patches referenced in Microsoft's security bulletin.
CVE-2009-0091
Google Chrome < 3.0.195.32 Remote Code Execution
PVS ID: 5225 FAMILY: Web Clients RISK: HIGH NESSUS ID:42413
Description: Synopsis : \n\nThe remote host contains a web browser that is vulnerable to remote code
execution attacks.\n\nThe version of Google Chrome installed on the remote host is earlier
than 3.0.195.32. Such versions are potentially affected by multiple vulnerabilities : \n\n -
The user is not warned about certain possibly dangerous file types such as 'SVG', 'MHT',
and 'XML' files. In some browsers, JavaScript can execute within these types of files.
(23979)\n\n - A malicious site could use the Gears SQL API to put SQL metadata into a
bad statement which could cause a subsequent memory corruption. This could lead to a
Gears plugin crash or possibly arbitrary code execution. (26179)\n\nFor your information,
the observed version of Google Chrome is: \n %L
Solution: Upgrade to Google Chrome 3.0.195.32 or later.
CVE-2009-3934
eDirectory < 8.8.5 ftf1/8.7.3.10 ftf2 NULL Base DN DoS
PVS ID: 5226 FAMILY: Generic
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:42412
Description: Synopsis : \n\nThe remote host is vulnerable to a denial of service attack.\n\nThe remote
host is running eDirectory, a directory service from Novell. The installed version is earlier
than 8.8 SP5 ftf1, or 8.7.3.10 ftf2. Such versions are affected by a denial of service
vulnerability when handling search requests with an undefined BaseDN. For your
information, the observed version of Novell eDirectory is: \n %L
Solution: Upgrade to eDirectory 8.8 SP5 ftf1 / 8.7.3.10 ftf2 or later.
Family Internet Services 1393