(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote database server is vulnerable to a cross-site attack.\n\nThe
remote host is running CouchDB, a document-oriented database. For your information, the
observed version of CouchDB is %L.\n\nVersions of CouchDB earlier than 1.0.2 are
potentially affected by a cross-site scripting vulnerability. The application fails to properly
sanitize user-supplied input before it is used in the Futon administrative interface. A remote
attacker could exploit this to execute arbitrary script code in the security context of
CouchDB's admin interface.
Solution: Upgrade to CouchDB 1.0.2 or later.
CVE-2010-3854
VLC Media Player < 1.1.7 Code Execution Vulnerability
PVS ID: 5756 FAMILY: Web Clients RISK: HIGH NESSUS ID:51851
Description: Synopsis :\n\nThe remote host contains an application that allows arbitrary code
execution.\n\nThe remote host contains VLC player, a multi-media application. For your
information, the observed version of VLC is %L.\n\nVersions of VLC media player earlier
than 1.1.7 are potentially affected by a code execution vulnerability due to insufficient
input validation when parsing a specially crafted Matroska or WebM (MKV) file.
Solution: Upgrade to VLC Media Player version 1.1.7 or later.
CVE-2011-0531
PostgreSQL < 9.0.3 / 8.4.7 / 8.3.14 / 8.2.20 Code Execution Vulnerability
PVS ID: 5757 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote database server is affected by a buffer overflow
vulnerability.\n\nFor your information, the version of PostgreSQL installed on the remote
host is %L.\n\n Versions of PostgreSQL earlier than 9.0.3, 8.4.7, 8.3.14, or 8.2.20 are
potentially affected by a buffer overflow vulnerability in the contrib module intarray's input
function for the query_int type. An attacker, exploiting this flaw, could potentially execute
arbitrary code on the remote host subject to the privileges of the user running the affected
application.
Solution: Upgrade to PostgreSQL 9.0.3, 8.4.7, 8.3.14, 8.2.20, or later.
CVE-2010-4015
Passive Vulnerability Scanner (PVS) Signatures
Google Chrome < 9.0.597.84 Multiple Vulnerabilities
PVS ID: 5758 FAMILY: Web Clients RISK: HIGH NESSUS ID:51872
Description: Synopsis :\n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Google Chrome is
%L.\n\nVersions of Google Chrome earlier than 9.0.597.84 are potentially affected by
multiple vulnerabilities :\n\n - A minor sandbox leak exists in stat(). Note this issue only
Family Internet Services 1561