(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote web server is vulnerable to a remote denial of service
attack.\n\nThe remote web server is hosting McAfee Common Management Agent, a
management related component for various McAfee products. The installed version of
McAfee Common Management Agent is earlier than 3.6.0.603. Such versions are
potentially affected by a remote denial of service vulnerability in the
'FrameworkService.exe' component when handling multiple large HTTP requests. For your
information, the observed version of McAfee Common Management Agent is: \n %L
Solution: Upgrade to Common Management Agent 3.6.0 Patch 3 with HotFix 10 or later.
CVE-2007-6584
MySQL < 5.1.41 Multiple Vulnerabilities
PVS ID: 5240 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:42900
Description: Synopsis : \n\nThe remote database server is vulnerable to multiple attack vectors.\n\nThe
remote host is running MySQL Community server < 5.1.41. Such versions are potentially
affected by multiple issues : \n\n - The application fails to correctly handle the data
directory path name if it contains symlinked directories in its path which could lead to a
local privilege escalation. (Bug 32167)\n\n - MySQL clients linked against OpenSSL did
not check server certificates presented by a server linked against yaSSL. (Bug 47320)\n\n -
An error related to the handling of certain SELECT statements containing subqueries.\n\n -
A failure to preserve unspecified 'null_value' flags when executing statements that use the
'GeomFromWKB' function.\n\nFor your information, the observed version of MySQL is: \n
%L
Solution: Upgrade to MySQL Community server 5.1.41 or later.
CVE-2009-4019
Opera < 10.10 Multiple Vulnerabilities
PVS ID: 5241 FAMILY: Web Clients RISK: HIGH NESSUS ID:42892
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe version of
Opera installed on the remote host is earlier than 10.01. Such versions are potentially
affected by multiple vulnerabilities : \n\n - Error messages can leak onto unrelated sites,
potentially leading to cross-site scripting attacks. (941)\n\n - A heap buffer overflow in
string to number conversion. (942)\n\nFor your information, the observed version of Opera
is: \n %L
Solution: Upgrade to Opera 10.10 or later.
CVE-2009-0689
PHP 5.3.x < 5.3.1 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5242 FAMILY: Web Servers NESSUS ID:42862
Family Internet Services 1398