(PVS) Signatures - Tenable Network Security

SeaMonkey 2.0.x < 2.0.6 Multiple Vulnerabilities
PVS ID: 5610 FAMILY: Web Clients RISK: HIGH NESSUS ID:47785
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nFor your information, the observed version of SeaMonkey is
%L.\n\nVersions of SeaMonkey 2.0.x earlier than 2.0.6 are potentially affected by multiple
vulnerabilities :\n\n Multiple memory safety bugs could result in memory corruption,
potentially resulting in arbitrary code execution. (MFSA 2010-34)\n\n - An error in DOM
attribute cloning could result in arbitrary code execution. (MFSA 2010-35)\n\n - An error
in Mozilla's 'NodeIterator' implementation could lead to arbitrary code execution. (MFSA
2010-36)\n\n An error in the code to store the names and values of plugin parameters could
lead to arbitrary code execution. (MFSA 2010-37)\n\n - The array class used to store CSS
values is affected by an integer overflow vulnerability. (MFSA 2010-39)\n\n - An integer
overflow vulnerability exists in the 'selection' attribute of the XUL tree element. (MFSA
2010-40)\n\n - A buffer overflow exists in Mozilla graphics code could lead to arbitrary
code execution. (MFSA 2010-41)\n\n - It is possible to read and parse resources from other
domains even when the content is not valid javascript leading to cross-domain data
disclosure. (MFSA 2010-42)\n\n - Multiple location bar spoofing vulnerabilities exist.
(MFSA 2010-45)\n\n - It is possible to read data across domains by injecting bogus CSS
selectors into a target site. (MFSA 2010-46)\n\n - Potentially sensitive URL parameters
could be leaked across domains via script errors. (MFSA 2010-47)
Solution: Upgrade to Mozilla SeaMonkey 2.0.6 or later.
CVE-2010-2754
MapServer < 5.6.4 / 4.10.6 Multiple Vulnerabilities
PVS ID: 5611 FAMILY: CGI RISK: HIGH NESSUS ID:47861
Description: Synopsis :\n\nThe remote web server contains a CGI script that is vulnerable to multiple
attack vectors.\n\nThe remote web server hosts MapServer, an open source platform for
publishing spacial data and interactive mapping applications to the web. For your
information, the observed version of MapServer is %L.\n\nVersions of MapServer earlier
than 5.6.4, or 4.10.6 are potentially affected by multiple vulnerabilities :\n\n - A buffer
overflow vulnerability in the 'ForcedTmpBase' parameter of 'msTmpFile()'. (Ticket
3484)\n\n - Unspecified security vulnerabilities in multiple debug command-line
arguments. (Ticket 3485)
Solution: Upgrade to MapServer 4.10.6, 5.6.4, or later.
CVE-2010-2540
Axon Virtual PBX < 2.13 /logon Multiple Parameter XSS
PVS ID: 5612 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:42475
Family Internet Services 1508