(PVS) Signatures - Tenable Network Security

Bugzilla 3.2.x earlier than 3.2.9, 3.4.x earlier than 3.4.9, and 3.6.x earlier than 3.6.3 are
potentially affected by multiple vulnerabilities :\n\n - By inserting a certain string into a
URL, it is possible to inject both headers and content to any browser that supports "Server
Push". (CVE-2010-3172)\n\n - The Charts system generates graphs with predictable names
into the 'graphs/' directory, which can also be browsed to see its contents.
(CVE-2010-3764)\n\n - YUI 2.8.1 is vulnerable to a cross-site scripting vulnerability in
certain .swf files.
Solution: Upgrade to Bugzilla 3.2.9, 3.4.9, 3.6.3 or later.
CVE-2010-3764
Microsoft Executable in Transit Detection
PVS ID: 5701 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may be compromised\n\nThis service appears to send a
Microsoft Windows executable when a connection to it is established. This may be
evidence of some malware which are known to propagate in this manner
realtime
Solution: Check the host and disinfect / reinstall it if necessary.
CVE Not available
SmartFTP Directory Traversal Vulnerability
PVS ID: 5702 FAMILY: FTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has a FTP client installed that is vulnerable to a directory
traversal attack\n\nThe remote host is running SmartFTP, a FTP client for Windows. For
your information, the observed version of SmartFTP is %L\n\nVersions of SmartFTP
earlier than 4.0.1124 are potentially affected by a directory traversal vulnerability. An
attacker, exploiting this flaw, could trick a user into downloading a malicious file into a
user's Startup folder.
Solution: Upgrade to SmartFTP 4.0.1124 or later.
CVE-2010-3099
SmartFTP filename Unspecified Vulnerability
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5703 FAMILY: FTP Clients RISK: HIGH NESSUS ID:50575
Description: Synopsis :\n\nThe remote host has a FTP client installed that is affected by an unspecified
vulnerability.\n\nThe remote host is running SmartFTP, a FTP client for Windows. For
your information, the observed version of SmartFTP is %L\n\nVersions of SmartFTP
earlier than 4.0.1142 are potentially affected by an unspecified vulnerability relating to
filenames.
Family Internet Services 1541