(PVS) Signatures - Tenable Network Security

CVE-2010-0109
Google Chrome < 4.1.249.1059 Multiple Vulnerabilities
PVS ID: 5516 FAMILY: Web Clients RISK: HIGH NESSUS ID:45610
Description: Synopsis : \n\nThe remote host is using a web client that is vulnerable to multiple attack
vectors.\n\nThe version of Google Chrome installed on the remote host is earlier than
4.1.249.1059. Such versions are reportedly affected by multiple vulnerabilities : \n\n - An
error related to type confusion with forms. (39443)\n\n - An HTTP request error leading to
a possible cross-site request forgery. (39698)\n\n - A local file reference through developer
tools. (40136)\n\n - A cross-site scripting issue in chrome: //net-internals. (40137)\n\n - A
cross-site scripting issue in chrome: //downloads. (40138)\n\n - Pages might load with the
privileges of the new tab page. (40575)\n\n - A memory corruption vulnerability in the V8
bindings. (40635)\n\nFor your information, the observed version of Google Chrome is: \n
%L
Solution: Upgrade to Google Chrome 4.1.249.1059 or later.
CVE-2010-1767
Alt-N MDaemon < 11.0.1 Multiple Remote DoS Vulnerabilities
PVS ID: 5517 FAMILY: POP Server
RISK:
MEDIUM
NESSUS ID:45627
Description: Synopsis : \n\nThe remote Windows host contains a program that is vulnerable to multiple
attack vectors.\n\nThe remote Windows host is running the Alt-N MDaemon mail server.
The installed version of MDaemon is earlier than 11.0.1. Such versions are potentially
affected by multiple unspecified denial of service vulnerabilities.\nFor your information,
the observed version of MDaemon is: \n %L
Solution: Upgrade to MDaemon 11.0.1 or later.
CVE Not available
Joomla! < 1.5.16 Multiple Vulnerabilities
PVS ID: 5518 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote web server has an application installed that is vulnerable to
multiple attack vectors.\n\nThe remote web server is hosting a version of Joomla! earlier
than 1.5.16. Such versions are potentially affected by multiple security issues : \n\n - If a
user enters a URL with a negative query limit or offset, a PHP notice displays revealing
information about the system.\n\n - The migration script in the Joomla! installer does not
check the file type being uploaded.\n\n - A user's session ID doesn't get modified when the
user logs on.\n\n - When a user requests a password reset, the reset token is stored in plain
text in the database.\n\nFor your information, the observed version of Joomla! is: \n %L
Solution: Upgrade to Joomla! 1.5.16 or later.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1477