(PVS) Signatures - Tenable Network Security

CVE Not available
Zabbix 1.8.x < 1.8.2 'DBCondition' Parameter SQL Injection
PVS ID: 5519 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is running a web application that is vulnerable to a
SQL-injection attack.\n\nThe remote host is running Zabbix, an IT monitoring service. The
installed version of Zabbix is earlier than 1.8.2. Such versions are potentially affected by a
SQL-injection vulnerability in the 'user' parameter of the 'api.jsonrpc.php' script. A remote,
unauthenticated attacker could exploit this flaw to gain control of the affected
application.\nFor your information, the observed version of Zabbix Front-end is: \n %L
Solution: Upgrade to Zabbix 1.8.2 or later.
CVE-2010-1277
Google Chrome < 4.1.249.1064 Multiple Vulnerabilities
PVS ID: 5520 FAMILY: Web Clients RISK: HIGH NESSUS ID:46171
Description: Synopsis : \n\nThe remote host is using a web client that is vulnerable to multiple attack
vectors.\n\nThe version of Google Chrome installed on the remote host is earlier than
4.1.249.1064. Such versions are reportedly affected by multiple vulnerabilities : \n\n - A
cross-origin bypass in Google URL. (40445)\n\n - A memory corruption vulnerability in
HTML5 media handling. (40487)\n\n - A memory corruption vulnerability in font handling.
(42294)\n\nFor your information, the observed version of Google Chrome is: \n %L
Solution: Upgrade to Google Chrome 4.1.249.1064 or later.
CVE-2010-1665
JBoss EAP < 4.2.0.CP09 / 4.3.0.CP08 Multiple Vulnerabilities
PVS ID: 5521 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:53337
Description: Synopsis : \n\nThe remote web server is vulnerable to multiple attack vectors.\n\nThe
remote host is running JBoss Enterprise Application Platform (JBEAP) < 4.2.0.CP09 /
4.3.0.CP08. Such versions are potentially affected by multiple vulnerabilities.\n\n - The
JMX Console configuration only specified an authentication requirement for requests that
used the GET and POST HTTP 'verbs'. A remote attacker could create an HTTP request
that does not specify GET or POST, causing it to be executed by the default GET handler
without authentication. (CVE-2010-0738)\n\n - It is possible to bypass authentication for
/web-console by specifying a HTTP method other than GET or POST.
(CVE-2010-1428)\n\n - An information disclosure vulnerability that allows attackers to
acquired details about deployed web contexts. (CVE-2010-1429)\n\nFor your information,
the observed version of JBoss Enterprise Application Platform is: \n %L \nIAVB Reference
: 2010-B-0042\nSTIG Finding Severity : Category I
Family Internet Services 1478