(PVS) Signatures - Tenable Network Security

CVE Not available
Mantis 1.2.x < 1.2.3 Cross-Site Scripting Vulnerability
PVS ID: 5676 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server is hosting a web application that is vulnerable to
multiple cross-site scripting attacks.\n\nThe remote web server is hosting Mantis, an open
source bugtracking application written in PHP. For your information, the observed version
of Mantis is %L.\n\nVersions of Mantis 1.2.x prior to 1.2.3 are potentially affected by
multiple cross-site scripting vulnerabilities :\n\n - A cross-site scripting issue exists when
viewing the Summary page. (Bug 0012309)\n\n - A cross-site scripting issue exists in
print_all_bug_page_word.php when printing project and category names. (Bug
0012238)\n\n - Multiple cross-site scripting issues exist which relate to custom field
enumeration values. (Bug 0012232)\n\n - A cross-site scripting vulnerability exists when
deleting maliciously named categories. (Bug 012230)\n\n - A cross-site scripting issue
exists in NuSOAP WSDL. (Bug 0012312)
Solution: Upgrade to Mantis 1.2.3 or later.
CVE-2010-3070
MySQL Community Server 5.1 < 5.1.51 Multiple Denial of Service Vulnerabilities
PVS ID: 5677 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:49711
Description: Synopsis :\n\nThe remote database server is vulnerable to multiple attack vectors.\n\nFor
your information, the observed version of MySQL Community Server is %L.\n\nVersions
of MySQL Community Server 5.1 earlier than 5.1.51 are potentially affected by multiple
vulnerabilities :\n\n - A privilege escalation vulnerability exists when using
statement-based replication. Version specific comments used on a master server with a
lesser release version than its slave can allow the MySQL privilege system on the slave
server to be subverted. (49124)\n\n - The improper handling of type errors during argument
evaluation in extreme-value functions, e.g., 'LEAST()' or 'GREATEST()' caused server
crashes. (55826)\n\n - The creation of derived tables needing a temporary grouping table
caused server crashes. (55568)\n\n - The re-evaluation of a user-variable assignment
expression after the creation of a temporary table caused server crashes. (55564)\n\n - The
pre-evaluation of 'LIKE' predicates while preparing a view caused server crashes.
(54568)\n\n - The use of 'GROUP_CONCAT()' and 'WITH ROLLUP' caused server
crashes. (54476)\n\n - The use of an intermediate temporary table and queries containing
calls to 'GREATEST()' or 'LEAST()', having a list of both numeric and 'LONGBLOB'
arguments, caused server crashes. (54461)\n\n - The use of nested joins in prepared
statements or stored procedures could result in infinite loops. (53544)
Solution: Upgrade to MySQL Community Server 5.1.51 or later.
CVE-2010-3840
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1532