(PVS) Signatures - Tenable Network Security

function in the wiki module is not properly sanitized which could allow SQL injection
attacks. (MSA-10-0006)\n\n - A problem exists in the handling of user submitted data in
global search forms. (MSA-10-0007)\n\n - A persistent cross-site scripting issue exists
when an admin uses the Login-as feature. (MSA-10-0008)\n\n - The 'Regenerate session id
during login' setting is not enabled by default. (MSA-10-0009)\n\nFor your information, the
observed version of Moodle is: \n %L
Solution: Upgrade to Moodle version 1.8.12, 1.9.8, or later.
CVE Not available
ClamAV < 0.96 Multiple Vulnerabilities
PVS ID: 5505 FAMILY: Web Clients RISK: HIGH NESSUS ID:45437
Description: Synopsis : \n\nThe remote host is running an anti-virus application that is vulnerable to
multiple attack vectors.\n\naccording to its version, the clamd anti-virus daemon on the
remote host is earlier than 0.96. Such versions are reportedly affected by multiple
vulnerabilities : \n\n - An attacker could bypass anti-virus detection by embedding
malicious code in a specially crafted 'CAB' file. (1826)\n\n - An error in the
'qtm_decompress()' function in 'libclamav/mspack.c' could lead to memory corruption
when scanning a specially crafted Quantum-compressed file. (1771)\n\nFor your
information, the observed version of ClamAV is: \n %L
Solution: Upgrade to ClamAV 0.96 or later.
CVE-2010-1311
AjaXplorer < 2.6 Multiple Vulnerabilities
PVS ID: 5506 FAMILY: CGI RISK: HIGH NESSUS ID:45489
Description: Synopsis : \n\nThe remote web server is hosting a web application that is vulnerable to
multiple attack vectors.\n\nThe remote web server is hosting AjaXplorer, a web-based file
management application. The installed version is earlier than 2.6. Such versions are
potentially affected by multiple vulnerabilities : \n\n - A command-injection vulnerability
via the 'destserver' parameter of the 'plugins/access.ssh/checkInstall.php' script.\n\n -
Unspecified input is not properly validated before being used to read files.\n\nFor your
information, the observed version of AjaXplorer is: \n %L
Solution: Upgrade to AjaXplorer 2.6 or later.
CVE Not available
LogMeIn Listening Server Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5507 FAMILY: Policy RISK: LOW NESSUS ID:Not Available
Family Internet Services 1473