(PVS) Signatures - Tenable Network Security

affected by multiple vulnerabilities :\n\n - An error exists such that web page content can be
displayed over dialog boxes leading to security warning misrepresentation. (977)\n\n - An
error exists such that WAP form contents can be leaded to third-party sites. (979)\n\n - Two
unspecified, high-severity vulnerabilities exists.
Solution: Upgrade to Opera 11.00 or later.
CVE-2010-4587
HP Power Manager < 4.3.2 Buffer Overflow Vulnerability
PVS ID: 5736 FAMILY: CGI RISK: HIGH NESSUS ID:51200
Description: Synopsis : \n\nThe power management application installed on the remote host is
vulnerable to multiple attack vectors.\n\nFor your information, the observed version of HP
Power Manager is : \n %L \n\nVersions of HP Powere Manager earlier than 4.3.2 are
potentially affected by a buffer overflow vulnerability because the application fails to
properly sanitize user supplied in put to the 'Login' parameter of the login page. An
unauthenticated, remote attacker could exploit this by sending a specially crafted HTTP
request, resulting in arbitrary code execution.
Solution: Upgrade to HP Power Manager 4.3.2 or later.
CVE-2010-4113
Android < 2.3 Multiple Vulnerabilities
PVS ID: 5737 FAMILY: Mobile Devices RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nFor your
information, the observed version of Android OS installed on the remote device is : \n %L
\n\nVersions of Android OS earlier than 2.3 are potentially affected by multiple
vulnerabilities : \n\n - A privilege escalation vulnerability exists in the Zygote/Dalvik
virtual machine framework.\n\n - A denial-of-service issue exists that can cause 'dexdump'
to crash.
Solution: Upgrade to Android 2.3 or later.
CVE Not available
Stuxnet Infected Host Detection
PVS ID: 5738 FAMILY: Backdoors RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'Backdoor'
program\n\nThe remote host is running the Stuxnet trojan. This was determined based on
the RPC UUID. Stuxnet is a Trojan which uses multiple vulnerabilities to infect and spread
to nearby hosts. Ultimately, the Trojan attempts to gain access to a SCADA network.
Solution: Manually clean the infected machine
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1554