(PVS) Signatures - Tenable Network Security

EXPLAIN with specially crafted queries could lead to a crash. (Bug #52711)\n\n - 'LOAD
DATA INFILE' did not check for SQL errors and sent an OK packet even when errors were
already reported. (Bug #52512)
Solution: Upgrade to MySQL Community Server 5.1.49 or later.
CVE-2010-3683
Novell iPrint Client < 5.42 Multiple Vulnerabilities
PVS ID: 5647 FAMILY: Web Clients RISK: HIGH NESSUS ID:48364
Description: Synopsis :\n\nThe remote host contains an application that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Novell iPrint Client is
%L\n\nVersions of Novell iPrint Client earlier than 5.42 are potentially affected by
multiple vulnerabilities :\n\n - Due to a flaw in the nipplib.dll module, it may be possible
for a remote attacker to delete arbitrary files from the remote system via the
'CleanUploadFiles' method provided by an ActiveX control. (TPTI-10-05)\n\n - By passing
a specially crafted value to the 'debug' parameter in the ActiveX control ienipp.ocx, it may
be possible for an attacker to trigger a stack-based buffer overflow, potentially resulting in
arbitrary code execution within the context of the user running the browser.
(TPTI-10-06)\n\n - Due to improper validation of plugin parameters, it may be possible for
an attacker to trigger a buffer overflow condition resulting in arbitrary code execution
within the context of the user running the browser. (ZDI-10-139)\n\nDue to improper
validation of plugin parameters it may be possible for an attacker to trigger a stack-based
buffer overflow, potentially resulting in arbitrary code execution within the context of the
user running the browser. (ZDI-10-140)
Solution: Upgrade to Novell iPrint Client 5.42 or later.
CVE-2010-3109
Novell iPrint Client < 5.44 Multiple Vulnerabilities
PVS ID: 5648 FAMILY: Web Clients RISK: HIGH NESSUS ID:48407
Description: Synopsis :\n\nThe remote host contains an application that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Novell iPrint Client is
%L.\n\nVersions of Novell iPrint Client earlier than 5.44 are potentially affected by
multiple vulnerabilities :\n\n - A buffer overflow was discovered in how iPrint client
handles the 'call-back-url' parameter value for a 'op-client-interface-version' operation
where the 'result-type' parameter is set to 'url'.\n\n - An uninitialized pointer vulnerability in
ienipp.ocx was discovered and allows an attacker to exploit an issue where the uninitialized
pointer is called and the process jumps to an address space controllable by the attacker.
Solution: Upgrade to Novell iPrint Client 5.44 or later.
CVE-2010-3105
Linksys WAP Default Credentials Detection
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1520