(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host has a program that is affected by multiple
vulnerabilities.\n\nThe version of OpenOffice installed on the remote host is earlier than
3.2.1. Such version are affected by several issues :\n\n - There is a TLS/SSL renegotiation
vulnerability in the included third-party OpenSSL library. (CVE-2009-3555)\n\n - There is
a python scripting vulnerability which may lead to undesired code execution when using
the OpenOffice scripting IDE. (CVE-2010-0395)\nIAVA Reference : 2011-A-0107\nIAVB
Reference : 2012-B-0038\nSTIG Finding Severity : Category I
Solution: Upgrade to OpenOffice version 3.2.1 or later.
PHP Version Detection
CVE-2010-0395
PVS ID: 5565 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: N/A
Solution: N/A
CVE Not available
Safari < 4.1 / 5.0 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5566 FAMILY: Web Clients RISK: HIGH NESSUS ID:46838
Description: Synopsis :\n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Safari is %L.\n\nVersions of
Safari earlier than 4.1 / 5.0 are potentially affected by multiple vulnerabilities :\n\n - A heap
buffer overflow exists in the handling of images with an embedded ColorSync profile.
(CVE-2009-1726)\n\n - Safari supports the inclusion of user information in URLs, which
allows the URL to specify a username and password to authenticate the user to the named
server. (CVE-2010-1384)\n\n - A use after free issue exists in Safari's management of
windows. (CVE-2010-1750)\n\n - An implementation issue exists in WebKit's handling of
URLs in the clipboard. (CVE-2010-1388)\n\n - Dragging or pasting a selection from one
site to another may allow scripts contained in the selection to be executed in the context of
the new site. (CVE-2010-1389)\n\n - A cononicalization issue exists in WebKit's handling
of UTF-7 encoded text. (CVE-2010-1390)\n\n - A path traversal issue exists in WebKit's
support for Local Storage and Web SQL database. (CVE-2010-1391)\n\n - A use after free
issue exists in WebKit's rendering of HTML buttons. (CVE-2010-1392)\n\n - An
information disclosure issue exists in WebKit's handling of Cascading Stylesheets.
(CVE-2010-1393)\n\n - A use after free issue exists in WebKit's handling of attribute
manipulation. (CVE-2010-1119)\n\n - A design issue exists in WebKit's handling of HTML
document fragments. (CVE-2010-1394)\n\n - An implementation issue exists in WebKit's
handling of keyboard focus. (CVE-2010-1422)\n\n - A scope management issue exists in
WebKit's handling of DOM constructor objects. (CVE-2010-1395)\n\n - A use after free
issue exists in WebKit's handling of the removal of container elements.
(CVE-2010-1396)\n\n - A use after free issue exists in WebKit's rendering of a selection
when the layout changes. (CVE-2010-1397)\n\n - A memory corruption issue exists in
WebKit's handling of ordered list insertions. (CVE-2010-1398)\n\n - An uninitialized
Family Internet Services 1491