(PVS) Signatures - Tenable Network Security

RISK:
MEDIUM
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML Injection attack\n\nThe remote
host is running an older version of the Drupal Context module. Context is a module used to
manage contextual conditions for different portions of the Drupal web site. The reported
version ( %L ) is reported vulnerable to an HTML injection flaw wherein a remote attacker,
with certain administrative rights, can insert HTML script code that would be executed
within the browser of clients.
Solution: Upgrade to Context version 6.x-2.0-rc4 or later
CVE-2010-1584
NETBIOS Domain/workgroup Detection
PVS ID: 5533 FAMILY: Generic
RISK: Risk
not available
NESSUS ID:Not Available
Description: The remote host is a NETBIOS workstation which is a part of the following Domain or
workgroup
realtime
Solution: N/A
CVE Not available
Samba < 3.5.2/3.4.8 Multiple DoS
PVS ID: 5534 FAMILY: Samba RISK: HIGH NESSUS ID:46351
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS)
attack\n\nAccording to its banner, the version of Samba Server on the remote host is
potentially affected by a flaw which would allow a remote attacker to disable the service.
An attacker, exploiting this flaw, would need network access to the SAMBA server.
Solution: upgrade to Samba 3.5.2 or 3.4.8
CVE-2010-1642
Movable Type < 5.02 Multiple Vulnerabilities
PVS ID: 5535 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a cross-site scripting (XSS) attack\n\nThe
remote host is running Movable Type, a blogging software for Unix and Windows
platforms. The installed version is earlier than 5.02. Such versions are reportedly affected
by a cross-site scripting flaw. An attacker, exploiting this flaw, would be able to post script
code which would be executed in the browser of the blog readers.
Family Internet Services 1482