(PVS) Signatures - Tenable Network Security

XMPP Client Detection
PVS ID: 5687 FAMILY: Generic RISK: NONE NESSUS ID:Not Available
Description: The following host is an XMPP client. The client application which is using XMPP is:\n
%L
Solution: N/A
LDAP Server Detection
CVE Not available
PVS ID: 5688 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is an LDAP server
Solution: Ensure that this server is authorized with respect to Corporate standards and policies.
CVE Not available
Winamp < 5.59 Build 3033 Multiple Vulnerabilities
PVS ID: 5689 FAMILY: Generic RISK: HIGH NESSUS ID:50379
Description: Synopsis :\n\nThe remote host has a media player installed that is vulnerable to multiple
attack vectors.\n\nThe remote host is running Winamp, a media player for Windows. For
your information, the observed version of Winamp is %L.\n\nVersions of Winamp earlier
than 5.59 build 3033 are potentially affected by multiple vulnerabilities :\n\n - Winamp
loads libraries in an insecure manner. (CVE-2010-3137)\n\n - An integer overflow
vulnerability exists in the 'in_mkv.dll' plugin when parsing MKV content.\n\n - A
heap-based buffer overflow vulnerability exists in the 'in_midi.dll' plugin when parsing
MIDI content.\n\n - A stack-based buffer overflow vulnerability exists in the 'in_mod.dll'
plugin when parsing Multitracker Module files.\n\n - A heap-based buffer overflow
vulnerability exists in the 'in_nsv.dll' plugin when parsing NSV content.\n\n - A heap-based
buffer overflow vulnerability exists when parsing VP6 video content.
Solution: Upgrade to Winamp 5.59 build 3033 or later.
CVE-2010-3137
Passive Vulnerability Scanner (PVS) Signatures
Mozilla Firefox 3.5.x < 3.5.15 Buffer Overflow Vulnerability
PVS ID: 5690 FAMILY: Web Clients RISK: HIGH NESSUS ID:50382
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to a buffer
overflow attack.\n\nFor your information, the observed version of Firefox is
:%L.\n\nVersions of Firefox 3.5.x earlier than 3.5.15 are potentially affected by a buffer
overflow vulnerability when mixing 'document.write()' and DOM insertions. (MFSA
2010-73)
Family Internet Services 1537