27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Description: The remote host is running an FTP client which appears to be leaking the following<br />

confidential data: %L<br />

Solution: N/A<br />

realtimeonly<br />

CVE Not available<br />

FTP Client Data Leakage<br />

<strong>PVS</strong> ID: 5923 FAMILY: FTP Clients RISK: INFO NESSUS ID:Not Available<br />

Description: The remote host is running an FTP client which appears to be leaking the following<br />

confidential data: %L<br />

Solution: N/A<br />

realtimeonly<br />

CVE Not available<br />

Adobe Flash Media server < 3.5.6 / 4.0.2 Multiple Vulnerabilities (APSB11-11)<br />

<strong>PVS</strong> ID: 5924 FAMILY: Web Servers<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:53895<br />

Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host<br />

is running Adobe Flash Media server. For your information, the observed version of Adobe<br />

Flash Media Sever is : \n %L \n\nVersions of Adobe FLash Media Server earlier than 3.5.6<br />

or 4.0.2 are potentially affected by multiple vulnerabilities : \n\n - A memory corruption<br />

issue exists due to a race condition in the TLS extension code provided by the bundled<br />

version of OpenSSL. (CVE-2010-3864)\n\n - An unspecified error relating to processing<br />

certain XML content could lead to a denial of service. (CVE-2011-0612)<br />

Solution: Upgrade to Flash Media Server 3.5.6, 4.0.2, or later.<br />

CVE-2010-3864<br />

Opera < 11.11 Frameset Memory Corruption<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

<strong>PVS</strong> ID: 5925 FAMILY: Web Clients RISK: HIGH NESSUS ID:54587<br />

Description: Synopsis :\n\nThe remote host has a web browser installed that is affected by a memory<br />

corruption vulnerability.\n\nThe remote host is running the Opera web browser. For your<br />

information, the observed version of Opera is \n%L\n\nVersions of Opera earlier than<br />

11.11 are potentially affected by a memory corruption vulnerability because the application<br />

does not properly handle specific framesets when unloading a page. An attacker could craft<br />

a web page that will trigger the vulnerability which may allow arbitrary code execution<br />

subject to the privileges of the user running the affected application.<br />

Family Internet Services 1611

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!