(PVS) Signatures - Tenable Network Security

Solution: Upgrade to OpenOffice version 3.2 or later.
CVE-2009-3302
Squid < 3.0STABLE24 HTCP Request Denial of Service
PVS ID: 5340 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:45591
Description: Synopsis : \n\nThe remote host is vulnerable to a Denial of Service (DoS)
attack.\n\nAccording to its banner, the version of Squid proxy caching server installed on
the remote host is 2.x or 3.0.x earlier than 3.0.STABLE24. Such versions are potentially
affected by a denial-of-service vulnerability due to incorrect processing of specially crafted
HTCP packets. For your information, the observed version of Squid is: \n %L
Solution: Either upgrade to Squid version 3.0.STABLE24 or later, or apply the patch referenced in
the project's advisory above.
CVE-2010-0639
Novell eDirectory < 8.8 SP5 Patch 3 eMBox SOAP Request DoS
PVS ID: 5341 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:44938
Description: Synopsis : \n\nThe remote host is vulnerable to a denial of service attack.\n\nThe remote
host is running eDirectory, a directory service software from Novell. The eMBox service
included with the installed version of eDirectory is affected by a denial of service
vulnerability. By sending a specially crafted HTTP SOAP request, it may be possible for a
remote attacker to crash the remote service. For your information, the observed version of
eDirectory is: \n %L
Solution: Upgrade to eDirectory 8.8 SP5 Patch 3 or later.
CVE-2010-0666
Passive Vulnerability Scanner (PVS) Signatures
Mozilla Firefox < 3.0.18 / 3.5.8 / 3.6 Multiple Vulnerabilities
PVS ID: 5342 FAMILY: Web Clients RISK: HIGH NESSUS ID:44659
Description: Synopsis : \n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nThe remote host is running a version of Mozilla Firefox earlier than
3.0.18, 3.5.8, 3.6. Such versions are potentially affected by multiple vulnerabilities : \n\n -
Several crashes can result in arbitrary code execution. (MFSA 2010-01)\n\n - The
implementation of 'Web Workers' contains an error in its handling of array data types when
processing posted messages. (MFSA 2010-02)\n\n - The HTML parser incorrectly frees
used memory when insufficient space is available to process remaining input. (MFSA
2010-03)\n\n - A cross-site scripting issue due to 'window.dialogArguments' being readable
cross-domain. (CVE-2010-04)\n\n - A cross-site scripting issue when using SVG
documents and binary Content-Type. (MFSA 2010-05)\n\n - Multiple crashes can result in
Family Internet Services 1430