(PVS) Signatures - Tenable Network Security

PVS ID: 5630 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:48273
Description: Synopsis :\n\nThe remote host is vulnerable to a denial-of-service attack.\n\nThe remote
host is running Zoiper, a cross-platform VoIP solution. For your information, the observed
library version of Zoiper %L.\n\nVersions of Zoiper earlier than 2.24 Library 5324 are
potentially affected by a denial-of-service vulnerability because the application fails to
properly handle specially crafted SIP INVITE Requests. An attacker, exploiting this flaw,
could potentially crash the affected application.
Solution: Upgrade to Zoiper 2.24 Library 5324 or later.
CVE-2009-3704
Drupal Devel module < 6.x-1.22 Cross-Site Scripting Vulnerability
PVS ID: 5631 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server is hosting a web application that is vulnerable to a
cross-site scripting attack.\n\nThe remote web server hosts a Drupal install that uses the
Devel module, a performance logging component. For your information, the observed
version of the Devel Module is %L.\n\nVersions of the Drupal Devel module earlier than
6.x-1.22 are potentially affected by a cross-site scripting vulnerability because the
application fails to properly sanitize URLs comprised of node paths. A remote attacker with
the ability to to add URL aliases could exploit this flaw to execute arbitrary script code in a
user's browser.
Solution: Upgrade to Drupal Devel module 6.x-1.22 or later.
CVE-2010-3022
Drupal OpenID module < 5.x-1.5 Authentication Bypass Vulnerability
PVS ID: 5632 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server is hosting a web application that is affected by an
authentication bypass vulnerability.\n\nThe remote web server hosts a Drupal install that
uses the OpenID module, a module that allows users to authenticate via OpenID. For your
information, the observed version of the Drupal OpenID module is %L.\n\nVersions of
Drupal OpenID module earlier than 5.x-1.5 are potentially affected by an authentication
bypass vulnerability because the application fails to implement all the required verifications
from the OpenID 2.0 protocol. A remote attacker, exploiting this flaw, could gain
unauthorized access to the affected Drupal install.
Solution: Upgrade to Drupal OpenID module 5.x-1.5 or later.
CVE-2010-3686
MySQL Server Failed Login Detection
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1515