(PVS) Signatures - Tenable Network Security

HP Network Node Manager i (NNMi) Multiple Vulnerabilities
PVS ID: 5905 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host contains a web application that is vulnerable to multiple
attack vectors.\n\nThe remote host contains HP Network Node Manager i, a fault
management application.\n\nFor your information, the observed version of HP Network
Node Manager i is : \n %L \n\nVersions of HP Network Node Manager i earlier than
9.01.003 are potentially affected by multiple issues : \n\n - An unspecified vulnerability
allows local users to read arbitrary files via unknown vectors. (CVE-2011-0897)\n\n - A
cross-site scripting vulnerability exists. (CVE-2011-0898)
Solution: Apply the patch supplied by HP.
CVE-2011-0898
IBM Solid Database < 4.5.182 / 6.0.1069 / 6.3.49 / 6.5.0.4 Denial of Service Vulnerability
PVS ID: 5906 FAMILY: Database RISK: HIGH NESSUS ID:53812
Description: Synopsis :\n\nThe remote database server is vulnerable to a remote code execution
attack.\n\nThe remote host is running IBM solidDB. For your information, the observed
version of solidDB is :%L.\n\nVersions of solidDB earlier than 4.5.182, 6.0.x earlier than
6.0.1069, 6.3.x earlier than 6.3 Fix Pack 8, and 6.5.x earlier than 6.5.0.4 are potentially
affected by a denial of service vulnerability due to a flaw in the way the application handles
the rpc_test_svc_readwrite and rpc_test_svc_done commands. A remote unauthenticated
attacker, exploiting this flaw, could crash the affected host.
Solution: Upgrade to IBM solidDB 4.5.182, 6.0.1069, 6.3 Fix Pack 8, 6.5 Fix Pack 4, or later.
CVE-2011-1208
Novell File Reporter Agent XML Parsing Remote Code Execution
PVS ID: 5907 FAMILY: Generic RISK: HIGH NESSUS ID:53536
Description: Synopsis : \n\nThe remote host contains a service that is vulnerable to a remote buffer
overflow attack.\n\nNovell File Reporter Agent, a tool for identifying files stored on the
network, is installed on the remote host. For your information, the observed version of
Novell File Reporter Agent is : \n %L \n\nVersions of Novell File Reporter Agent earlier
than 1.0.4.2 are potentially affected by a buffer overflow vulnerability because the service,
which listens by default on TCP port 3037, blindly copies user-supplied data into a
fixed-length buffer on the stack when handling the contents of an XML tag. An
unauthenticated remote attacker who can access the agent service can leverage this issue to
execute arbitrary code under the context of the user running the affected application.
Solution: Upgrade to Novell File Reporter 1.0.2, which includes NFR Agent version 1.0.4.2.
CVE-2011-0994
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1606