(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote DNS Server is vulnerable to a remote cache-poisoning
attack.\n\nThe remote DNS Server is running Bind 9 earlier than 9.4.3-P5, 9.5.2-P1, or
9.6.1-P3. Such versions are potentially affected by a remote cache-poisoning attack. An
error exists in the DNSSEC NSEC/NSEC3 validation code taht could cause bogus
NXDOMAIN responses to be cached as if they had validated correctly. For your
information, the observed version of BIND 9 is: \n %L
Solution: Upgrade to BIND 9.4.3-P5, 9.5.2-P2, 9.6.1-P3, or later.
CVE-2010-0097
HP Power Manager < 4.2.10 Multiple Vulnerabilities
PVS ID: 5324 FAMILY: CGI RISK: HIGH NESSUS ID:44109
Description: Synopsis : \n\nThe power management application installed on the remote host is
vulnerable to multiple attack vectors.\n\nThe installed version of HP Power Manager is
earlier than 4.2.10. Such versions are potentially affected by the following vulnerabilities :
\n\n - Adequate bounds checking is not performed on the 'Login' parameter of the login
page, which could lead to a buffer overflow. A remote unauthenticated attacker could
exploit this to execute arbitrary code as SYSTEM. (CVE-2009-2685)\n\n - Adequate
bounds checking is not performed on the 'fileName' or 'LogType' parameter of
'formExportDataLogs', which could lead to a buffer overflow. A remote authenticated
attacker could exploit this to execute arbitrary code as SYSTEM. (CVE-2009-3999)\n\n -
The 'filename' parameter of 'formExportDataLogs' has a directory traversal vulnerability. A
remote authenticated attacker could exploit this to overwrite arbitrary files with almost
arbitrary data. This could result in a denial of service, or arbitrary code execution as
SYSTEM. (CVE-2009-4900)\n\nFor your information, the observed version of HP Power
Manager is: \n %L
Solution: Upgrade to HP Power Manager 4.2.10 or later.
CVE-2009-4000
Passive Vulnerability Scanner (PVS) Signatures
Real Networks RealPlayer < RealPlayer SP 1.0.5 Multiple Vulnerabilities
PVS ID: 5325 FAMILY: Web Clients RISK: HIGH NESSUS ID:44119
Description: Synopsis :\n\nThe remote host is running an application that is vulnerable to multiple attack
vectors.\n\nThe remote host is running a version of RealPlayer earlier than RealPlayer SP
1.0.5. Such versions are potentially affected by multiple vulnerabilities :\n\n - A RealPlayer
'ASM' Rulebook heap-based buffer overflow. (CVE-2009-4241)\n\n - A RealPlayer 'GIF'
file heap overflow. (CVE-2009-4242)\n\n - A RealPlayer media overflow (http chunck
encoding). (CVE-2009-4243)\n\n - A RealPlayer 'IVR' file processing buffer overflow.
(CVE-2009-0375)\n\n - A RealPlayer 'IVR' file heap overflow. (CVE-2009-0376)\n\n - A
RealPlayer 'SIPR' codec heap overflow. (CVE-2009-4244)\n\n - A RealPlayer compressed
'GIF' heap overflow. (CVE-2009-4245)\n\n - A RealPlayer 'SMIL' parsing heap overflow.
(CVE-2009-4257)\n\n - A RealPlayer skin parsing stack overflow. (CVE-2009-4246)\n\n -
A RealPlayer 'ASM' RuleBook array overflow. (CVE-2009-4247)\n\n - A RealPlayer 'rtsp'
'set_parameter' buffer overflow. (CVE-2009-4248)\n\nNote that different versions are
Family Internet Services 1424