(PVS) Signatures - Tenable Network Security

commands when they should not have that ability. Note that only users with the 'system'
privileges should be able to do this. (AST-2011-006)
Solution: Upgrade to Asterisk 1.4.40.1, 1.6.1.25, 1.6.2.17.3, 1.8.3.3, Business Edition C.3.6.4, or
later.
CVE-2011-1599
Skype Detection (User-Agent)
PVS ID: 5898 FAMILY: Internet Messengers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy\n\nThe remote host is using the Skype program, a peer to peer chat and
VoIP software. The reported version number is : %L
Solution: Ensure that the use of this software is in accordance with organizational security policies.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Google Chrome < 11.0.696.57 Multiple Vulnerabilities
PVS ID: 5899 FAMILY: Web Clients RISK: HIGH NESSUS ID:53569
Description: Synopsis :\n\nThe remote host contains a web browser that is affected by a code execution
vulnerability.\n\nFor your information, the observed version of Google Chrome is
%L.\n\nVersions of Google Chrome earlier than 11.0.696.57 are potentially affected by
multiple vulnerabilities :\n\n - A stale pointer exists in floating point handling. (61502)\n\n
- It may be possible to bypass the pop-up blocker via plug-ins. (70538)\n\n - A linked-list
race issue exists in database handling. Note that this issue only affects Chrome on Linux
and Mac OS. (70589)\n\n - There is a lack of thread safety in MIME handling. (71586)\n\n
- A bad extension with 'tabs' permission can capture local files. (72523)\n\n - It is possible
to crash the browser due to bad interaction with X. Note that this issue only affects Chrome
on Linux. (72910)- Multiple integer overflows exist in float rendering. (73526)\n\n - A
same origin policy violation exists with blobs. (74653)\n\n - A use-after-free error exists
with ruby tags and CSS. (75186)\n\n - A bad cast exists with floating select lists.
(75347)\n\n - Corrupt node trees exists with mutation events. (75801)\n\n - Multiple stale
pointers exist in layering code. (76001)\n\n - A race condition exists in the sandbox
launcher. (76542)\n\n - An out-of-bounds read exists in SVG. (76646)\n\n - It is possible to
spoof the URL bar with navigation errors and interrupted loads. (76666, 77507, 78031)\n\n
- A stale pointer exists in drop-down list handling. (76966)\n\n - A stale pointer exists in
height calculations. (77130)\n\n - A use-after-free error exists in WebSockets. (77346)\n\n -
Multiple dangling pointers exist in file dialogs. (77349)\n\n - Multiple dangling pointers
exist in DOM id map. (77463)\n\n - It is possible to spoof the URL bar with redirect and
manual reload. (77786)\n\n - A use-after-free issue exists in DOM id handling. (79199)\n\n
- An out-of-bounds read exists when handling multipart-encoded PDFs. (79361)\n\n -
Multiple stale pointers exist with PDF forms. (79364)
Solution: Upgrade to Google Chrome 11.0.696.57 or later.
Family Internet Services 1603