(PVS) Signatures - Tenable Network Security

CVE-2010-1975
MySQL Community Server 5.1 < 5.1.46 Multiple Vulnerabilities
PVS ID: 5547 FAMILY: Database RISK: LOW NESSUS ID:46328
Description: Synopsis :\n\nThe remote database server is vulnerable to multiple attack vectors.\n\nThe
reported version of MySQL Community Sever 5.1 on the remote host is %L.\n\nVersions
of MySQL Community Server 5.1 earlier than 5.1.46 are potentially affected by the
following vulnerabilities :\n\n - A local user may be able to issue a 'DROP TABLE'
command for one MyISAM table and remove the data and index files of a different
MyISAM table. (Bug #40980)\n\n - The application does not correct check privileges in
calls to 'UNINSTALL PLUGIN', which could be abused by an unprivileged user to
uninstall plugins loaded dynamically. (BUG #51770)
Solution: Upgrade to MySQL Community Server 5.1.46 or later.
CVE-2010-1626
ClamAV < 0.96.1 Multiple Vulnerabilities
PVS ID: 5548 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:46706
Description: Synopsis :\n\nThe remote host is running an anti-virus application that is vulnerable to
multiple attack vectors.\n\nThe reported version of ClamAV on the remote host is %L.
Versions of ClamAV earlier than 0.96.1 are potentially affected by multiple vulnerabilities
:\n\n - An error exists within the 'cli_pdf()' function in 'libclamav/pdf.c' when processing
certain PDF files. (2016)\n\n - An error exists within the 'parseicon()' function in
'libclamav/pe_icons.c' when processing PE icons. This can be exploited to trigger an
out-of-bounds access when reading data and potentially cause a crash via a specially crafted
PE file. (2031)
Solution: Upgrade to ClamAV 0.96.1 or later.
CVE-2010-1640
Trojan/Backdoor - Warbot Detection
PVS ID: 5549 FAMILY: Backdoors RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'Backdoor'
program\n\nA host is making HTTP requests that are formatted as a Warbot command
would be. This is indicitive of an infection by the Warbot trojan. The Warbot trojan allows
for arbitrary code to be executed on the system, as well as enables it to be used in various
DDoS attacks.
realtime
Passive Vulnerability Scanner (PVS) Signatures
Solution: Update your Antivirus and perform a full scan of the remote operating system.
Family Internet Services 1486