(PVS) Signatures - Tenable Network Security

CVE Not available
Mac OS X 10.6 < 10.6.6 Multiple Vulnerabilities
PVS ID: 5739 FAMILY: Generic RISK: HIGH NESSUS ID:51423
Description: Synopsis :\n\nThe remote host is missing a Mac OS X update that fixes a security
issue.\n\nFor your information, the observed version of Mac OS X is %L.\n\nVersions of
Mac OS X 10.6 earlier than 10.6.6 are potentially affected by a security issue. Mac OS X
10.6.6 contains a security fix for the following product :\n\n - PackageKit
Solution: Upgrade to Mac OS X 10.6.6 or later.
CVE-2010-4013
PHP 5.2 < 5.2.17 / 5.3 < 5.3.5 String To Double Conversion DoS
PVS ID: 5740 FAMILY: Web Servers RISK: LOW NESSUS ID:51439
Description: Synopsis :\n\nThe remote web server uses a version of PHP that is affected by a denial of
service vulnerability.\n\nAccording to its banner the version of PHP installed on the remote
host is either 5.2 earlier than 5.2.17 or 5.3 earlier than 5.3.5. Such versions may experience
a crash while performing string to double conversion for certain numeric values. Only x86
32-bit PHP processes are known to be affected by this issue regardless of whether the
system running PHP is 32-bit or 64-bit.
Solution: Upgrade to PHP version 5.2.17/5.3.5 or later.
CVE-2010-4645
Rocket Software UniVerse < 10.3.9 Remote Code Execution Vulnerability
PVS ID: 5741 FAMILY: Generic RISK: HIGH NESSUS ID:51575
Description: Synopsis :\n\nThe remote host contains a database application that is affected by a remote
code execution vulnerability.\n\nThe remote host has Rocket Software UniVerse installed.
For your information, the installed version of UniVerse is %L.\n\nVersions of UniVerse
earlier than 10.3.9 are potentially affected by a remote code execution vulnerability because
the application fails to properly validate a size value in a RPC packet header before using it
to determine the number of bytes to receive. A remote unauthenticated attacker, exploiting
this flaw, could execute arbitrary code on the remote host with SYSTEM level privileges.
Solution: Upgrade to UniVerse 10.3.9 or later.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Google Chrome < 8.0.552.237 Multiple Vulnerabilities
PVS ID: 5742 FAMILY: Web Clients RISK: HIGH NESSUS ID:51511
Family Internet Services 1555