(PVS) Signatures - Tenable Network Security

Opera < 10.62 Path Subversion Arbitrary DLL Injection Code Execution
PVS ID: 5661 FAMILY: Web Clients RISK: HIGH NESSUS ID:49174
Description: Synopsis :\n\nThe remote host has a web browser that is affected by an arbitrary code
execution vulnerability.\n\nThe remote host is running the Opera web browser. For your
information, the observed version of Opera is %L.\n\nVersions of Opera earlier than 10.62
may unintentionally load malicious DLL files and execute arbitrary code due to Opera's
DLL search methods. (970)
Solution: Upgrade to Opera 10.62 or later.
CVE Not available
Squid < 3.1.8 / 3.2.0.2 NULL Pointer Dereference Denial of Service Vulnerability
PVS ID: 5662 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:49693
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Squid, a web proxy application. For your information, the observed
version of Squid is %L.\n\nVersions of Squid earlier than 3.1.8 / 3.2.0.2 are potentially
affected by a denial of service vulnerability caused by an internal error in its string
handling. A remote attacker, exploiting this flaw, could crash the affected service.
Solution: Upgrade to Squid version 3.1.8, 3.2.0.2, or later.
CVE-2010-3072
Samba 3.x < 3.5.5 / 3.4.9 / 3.3.14 sid_parse Buffer Overflow
PVS ID: 5663 FAMILY: Samba RISK: HIGH NESSUS ID:49228
Description: Synopsis :\n\nThe remote Samba server is affected by a buffer overflow
vulnerability.\n\nFor your information, the observed version of Samba is
%L.\n\nAccording to its banner, the version of Samba 3.x running on the remote host is
earlier than 3.5.5. The 'sid_parse()' and related 'dom_sid_parse()' functions in such versions
fail to correctly check their input lengths when reading a binary representation of a
Windows SID (Security ID). An attacker who is able to get a connection to a file share,
either authenticated or via a guest connection, can leverage this issue to launch a stack
buffer overflow attack against the affected smbd service and possibly execute arbitrary
code.
Solution: Either apply one of the patches referenced in the project's advisory or upgrade to 3.5.5 /
3.4.9 / 3.3.14 or later.
CVE-2010-3069
Passive Vulnerability Scanner (PVS) Signatures
Google Chrome < 6.0.472.59 Multiple Vulnerabilities
PVS ID: 5664 FAMILY: Web Clients RISK: HIGH NESSUS ID:49237
Family Internet Services 1527