(PVS) Signatures - Tenable Network Security

CVE Not available
Google Chrome < 10.0.648.133 Code Execution Vulnerability
PVS ID: 5818 FAMILY: Web Clients RISK: HIGH NESSUS ID:52657
Description: Synopsis :\n\nThe remote host contains a web browser that is affected by a code execution
vulnerability.\n\nFor your information, the observed version of Google Chrome is
%L.\n\nVersions of Google Chrome earlier than 10.0.648.133 are potentially affected by a
memory corruption vulnerability in style handling. By tricking a user into opening a
specially crafted web page, a remote unauthenticated attacker could execute arbitrary script
code on the host subject to the privileges of the user running the affected application.
Solution: Upgrade to Google Chrome 10.0.648.133 or later.
CVE-2011-1290
Facebook Chat Client Username Detection
PVS ID: 5819 FAMILY: Internet Services RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the Facebook chat application. The logged UserID associated
with this client account is : %P
realtime
Solution: Ensure this software meets corporate guidelines for employee use.
CVE Not available
Social Security Number Cleartext Transmission (Client)
PVS ID: 5820 FAMILY: Data Leakage RISK: HIGH NESSUS ID:Not Available
Description: The remote client sent a plaintext message which seems to contain a Social Security
Number. Examine the following for possible confidential data : %L
realtimeonly
Solution: Ensure that confidential data is encrypted while in transit
CVE Not available
Social Security Number Cleartext Transmission (Client)
PVS ID: 5821 FAMILY: Data Leakage RISK: HIGH NESSUS ID:Not Available
Description: The remote client sent a plaintext message which seems to contain a Social Security
Number. Examine the following for possible confidential data : %L
realtimeonly
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1580