(PVS) Signatures - Tenable Network Security

filter may allow registered users to launch persistent cross-site scripting attacks.
(MSA-10-012)\n\n - A potential cross-site request forgery vulnerability exists in Quiz
reports.\n\n (MSA-10-013)
Solution: Upgrade to Moodle version 1.8.13, 1.9.9, or later.
CVE Not available
Opera < 10.54 Multiple Vulnerabilities
PVS ID: 5576 FAMILY: Web Clients RISK: HIGH NESSUS ID:47113
Description: Synopsis :\n\nThe remote host has a web browser that is vulnerable to multiple attack
vectors.\n\nThe remote host is running the Opera web browser. For your information, the
observed version of Opera is %L.\n\nVersions of Opera earlier than 10.54 are potentially
affected by multiple vulnerabilities :\n\n - Opera may be used as a vector for a font issue in
the underlying operating system. (KB 954)\n\n - An extremely severe issue due to an
undisclosed error.\n\n - A highly severe issue due to an undisclosed error.\n\n - A
moderately severe issue due to an undisclosed issue.\n\n - A less severe issue due to an
undisclosed error.
Solution: Upgrade to Opera 10.54 or later.
CVE-2010-2666
Atlassian JIRA < 4.1.2 Multiple Vulnerabilities
PVS ID: 5577 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:47114
Description: Synopsis :\n\nThe remote web server hosts an application that is vulnerable to multiple
attack vectors.\n\nAtlassian JIRA, a web-based application for bug tracking, issue tracking,
and project management is installed on the remote web server. For your information, the
observed version of Atlassian JIRA is %L.\n\nVersions of JIRA earlier than 4.1.2 are
potentially affected by multiple vulnerabilities :\n\n - Multiple cross-site scripting
vulnerabilities in URL query strings.\n\n - JIRA standalone fails to properly protect
sensitive cookie data with the 'HTTPOnly' protection mechanism.\n\n - Users without the
'JIRA Users' permission can login via crowd single-sign-on.\n\nA cross-site request forgery
in the 'logout' action.\n\n - Multiple vulnerabilities in the FishEye plugin.\n\n - A security
vulnerability in the Bamboo plugin.
Solution: Upgrade to Atlassian JIRA 4.1.2.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Apple iPhone/iPad OS < 4.0 Multiple Vulnerabilities
PVS ID: 5578 FAMILY: Mobile Devices RISK: HIGH NESSUS ID:Not Available
Family Internet Services 1496