(PVS) Signatures - Tenable Network Security

the observed version of ViewVC is: \n %L
Solution: Upgrade to ViewVC 1.0.11, 1.1.5, or later.
CVE-2010-0132
Firefox < 3.6.3 Remote Code Execution Vulnerability
PVS ID: 5502 FAMILY: Web Clients RISK: HIGH NESSUS ID:45403
Description: Synopsis : \n\nThe remote host has a web browser installed that is vulnerable to a remote
code execution attack.\n\nThe remote host is running a version of Mozilla Firefox 3.6.x
earlier than 3.6.3. Such versions are potentially affected by a memory corruption flaw
caused by the re-use of a freed object when moving DOM nodes between documents. A
remote attacker, exploiting this flaw, could execute arbitrary code on the remote host
subject to the privileges of the user running the affected application.\nFor your information,
the observed version of Firefox is: \n %L
Solution: Upgrade to Firefox 3.6.3 or later.
CVE-2010-1121
CouchDB < 0.11.0 Timing Attack Vulnerability
PVS ID: 5503 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:45435
Description: Synopsis : \n\nThe remote host is affected by an information disclosure
vulnerability.\n\nThe remote host is running CouchDB, a document-oriented database. The
installed version of CouchDB is earlier than 0.11.0. Such versions are potentially affected
by an information disclosure vulnerability via a timing attack caused by a break-on-equality
string comparison when verifying hashes or passwords.\nFor your information, the
observed version of CouchDB is: \n %L
Solution: Upgrade to CouchDB 0.11.0 or later.
CVE-2010-0009
Moodle < 1.8.12 / 1.9.8 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5504 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe version of
Moodle installed on the remote host is potentially vulnerable to multiple flaws.\n\n -
Multiple unspecified cross-site scripting vulnerabilities in the KSES text cleaning library.
(MSA-10-0001)\n\n - A cross-site scripting vulnerability exists in the PHP CAS client
library. Note that this only affects Moodle installations that use CAS authentication.
(MSA-10-0002)\n\n - An issue exists in the course profile page which allows ordinary users
to find out the names of other users. (MSA-10-0003)\n\n - The restoring of courses
sometimes results in creation of new roles. (MSA-10-0004)\n\n - A SQL injection
vulnerability exists in several forms. (MSA-10-0005)\n\n - Data passed to the 'add_to_log()'
Family Internet Services 1472