(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host contains a mail client that is affected by multiple
vulnerabilities.\n\nThe installed version of Mozilla Thunderbird is earlier than 3.0.2. Such
versions are potentially affected by the following security issues : \n\n - Multiple crashes
can result in arbitrary code execution. (MFSA 2010-01)\n\n - The HTML parser incorrectly
frees used memory when insufficient space is available to process remaining input. (MFSA
2010-03)\n\n - Multiple crashes can result in arbitrary code execution. (MFSA
2010-11)\n\n - A cross-site scripting issue when using 'addEventListener' and 'setTimeout'
on a wrapped object. (MFSA 2010-12)\n\n - It is possible to corrupt a user's XUL cache.
(MFSA 2010-14)\n\nFor your information, the observed version of Thunderbird is: \n %L
Solution: Upgrade to Mozilla Thunderbird 3.0.2 or later.
CVE-2010-0171
Apache < 2.2.15 Multiple Vulnerabilities
PVS ID: 5356 FAMILY: Web Servers RISK: HIGH NESSUS ID:45004
Description: Synopsis : \n\nThe remote web server is vulnerable to multiple attack
vectors.\n\nAccording to its banner, the version of Apache 2.2 installed on the remote host
is older than 2.2.15. Such versions are potentially affected by multiple vulnerabilities : \n\n
- A TLS renegotiation prefix attack is possible. (CVE-2009-3555)\n\n - The
'mod_proxy_ajp' module returns the wrong status code if it encounters an error which
causes the back-end server to be put into an error state. (CVE-2010-0408)\n\n - The
'mod_isapi' module attempts to unload the 'ISAPI.DLL' when it encounters various error
states which could leave call-backs in an undefined state. (CVE-2010-0425)\n\n - A flaw in
the core sub-request process code can lead to sensitive information from a request being
handled by the wrong thread if a multi-threaded environment is used.
(CVE-2010-0434)\n\nFor your information, the observed version of Apache is: \n %L
\nIAVA Reference : 2011-A-0107\nIAVB Reference : 2012-B-0038\nSTIG Finding
Severity : Category I
Solution: Either ensure the affected module is not in use or upgrade to Apache version 2.2.15 or later.
CVE-2010-0434
Trojan/Backdoor - Arugizer Detection
PVS ID: 5357 FAMILY: Backdoors RISK: HIGH NESSUS ID:45006
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'Backdoor'
program\n\nArugizer backdoor activity has been detected. This indicates that a successful
reply to a YES command sent to the Arugizer backdoor has been seen, which is a clear sign
that the backdoor is installed and responding to commands.
Solution: Update your Antivirus and perform a full scan of the remote operating system.
CVE-2010-0103
OpenSSL < 0.9.8m Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1435