(PVS) Signatures - Tenable Network Security

user-supplied input to the 'p_p_id' parameter. An unauthenticated can supply malicious data
which is then displayed to an administrator in another page. For your information, the
observed version of Liferay Portal is: \n %L
Solution: Upgrade to Liferay Portal 5.3.0 or later.
CVE-2009-3742
Trac < 0.11.6 Multiple Vulnerabilities
PVS ID: 5297 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote web server is hosting an application that is vulnerable to
multiple attack vectors.\n\nThe remote web server is hosting Trac, a web-based software
management application. The installed version of Trac is earlier than 0.11.6. Such versions
are potentially affected by multiple vulnerabilities : \n\n - Fixed the policy checks in report
results when using alternate formats.\n\n - Added a check for the 'raw' role that is missing
in docutils < 0.6.\n\nFor your information, the observed version of Trac is: \n %L
Solution: Upgrade to Trac 0.11.6 or later.
CVE Not available
Pidgin < 2.6.5 Information Disclosure Vulnerability
PVS ID: 5298 FAMILY: Internet Messengers
RISK:
MEDIUM
NESSUS ID:43862
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Pidgin < 2.6.5. Such versions are potentially affected by an information
disclosure vulnerability because the MSN protocol plugin axtracts the filename of a custom
emoticon from an incoming request and uploads that file without correlating the filename to
a valid custom emoticon. For your information, the observed version of Pidgin is: \n %L
Solution: Upgrade to Pidgin 2.6.5 or later.
Web Client Detection
CVE-2010-0013
PVS ID: 5299 FAMILY: Web Clients RISK: NONE NESSUS ID:Not Available
Description: The remote host is using the following Web client : \n%L
Solution: N/A
realtimeonly
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1416