(PVS) Signatures - Tenable Network Security

PVS ID: 5649 FAMILY: Web Servers RISK: HIGH NESSUS ID:49646
Description: Synopsis :\n\nThe remote host is configured with default or easily-guessed
credentials\n\nThe remote host is a wireless access point (WAP). This version of Linksys
shipped with a default userID and password which can be used to gain elevated access to
the device. In this case, the credentials are Gemtek/gemtekswd . Since these credentials are
hard coded into the device image, there is not a way to change them via the administrative
tools.
Solution: obtain a fix from the vendor
CVE-2010-1573
Real Networks RealPlayer SP < 1.1.5 Multiple Vulnerabilities
PVS ID: 5650 FAMILY: Web Clients RISK: HIGH NESSUS ID:48907
Description: Synopsis :\n\nThe remote host is running an application that is vulnerable to multiple attack
vectors.\n\nThe remote host is running RealPlayer, a multi-media application. For your
information, the observed build of RealPlayer SP is %L.\n\nRealPlayer SP builds earlier
than 12.0.0.879 are potentially affected by multiple vulnerabilities :\n\n - A RealPlayer
malformed 'IVR' pointer index code execution vulnerability exists. (CVE-2010-2996,
CVE-2010-2998)\n\nA RealPlayerActiveX unauthorized file access vulnerability exists.
(CVE-2010-3002)\n\nA RealPlayer 'QCP' file parsing integer overflow vulnerability exists.
(CVE-2010-0116)\n\nA vulnerability exists in the way RealPlayer processes the
dimensions in the 'YUV420' transformation of 'MP4' content. (CVE-2010-0117)\n\nA
heap-based buffer overflow vulnerability exists in RealPlayer's 'QCP' parsing.
(CVE-20010-0120)\n\nA vulnerability exists in the ActiveX IE plugin relating to the
opening of multiple browser windows. (CVE-2010-3001)\n\n - An uninitialized pointer
vulnerability exists in the CDDA URI ActiveX Control. (CVE-2010-3747) - A remote code
execution vulnerability exists in RJMDSections. (CVE-210-3750) - A RealPlayer 'QCP'
parsing heap-based buffer overflow vulnerability exists. (CVE-2010-2578)\n\n - A remote
code execution issue exists in multiple protocol handlers for the RealPlayer ActiveX
control. (CVE-2010-3751)\n\n - A stack overflow vulnerability exists in the RichFX
component. (CVE-2010-3748)\n\n - A paramenter injection vulnerability exists in the
RecordClip browser extension. (CVE-2010-3749)
Solution: Upgrade to RealPlayer SP 1.1.5 or later.
CVE-2010-3751
Passive Vulnerability Scanner (PVS) Signatures
VLC Media Player < 1.1.4 Patch Subversion Arbitrary DLL Injection Code Execution
PVS ID: 5651 FAMILY: Web Clients RISK: HIGH NESSUS ID:48906
Description: Synopsis :\n\nThe remote host contains an application that allows arbitrary code
execution.\n\nThe remote host contains VLC player, a multi-media application. For your
information, the observed version of VLC is %L.\n\nVersions of VLC media player earlier
than 1.1.4 are potentially affected by a code execution vulnerability. The application
insecurely looks in its current working directory when resolving DLL dependencies, such
as for 'wintab32.dll'. If a malicious DLL with the same name as a required DLL is located
Family Internet Services 1521