(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host contains an application that is vulnerable to multiple attack
vectors\n\nThe remote host contains VLC player, a multi-media application. For your
information, the observed version of VLC is : \n %L .\n\nVersions of VLC media player
earlier than 1.1.11 are potentially affected by multiple vulnerabilities : \n\n - A buffer
overflow vulnerability exists in the Read Media file parser. (SA-1105)\n\n - A heap
overflow vulnerability exists in the AVI file parser. (SA-1106)
Solution: Upgrade to VLC Media Player version 1.1.11 or later.
CVE-2011-2588
Opera < 11.10 Multiple Vulnerabilities
PVS ID: 5988 FAMILY: Web Clients RISK: HIGH NESSUS ID:55506
Description: Synopsis : \n\nThe remote host has a web browser that is vulnerable to multiple attack
vectors.\n\nThe remote host is running the Opera web browser. For your information, the
observed version of Opera is : \n %L .\n\nVersions of Opera earlier than 11.10 are
potentially affected by multiple vulnerabilities : - An unspecified vulnerability allows
remote attackers to hijack searches and customizations using unspecified third-party
applications. (CVE-2011-2634)\n\n - Several errors exist that can cause application crashes.
Affected items or functionalities are the handling of the CSS pseudo-class ': hover' if used
with transforms on a floated element, unspecified web content, and the handling of an
embedded Java applet with empty parameters. (CVE-2011-2635, CVE-2011-2636,
CVE-2011-2637, CVE-2011-2638, CVE-2011-2640)\n\n - An error in the handling of
hidden animated GIF images can cause a denial of service through CPU consumption as
image repaints are triggered. (CVE-2011-2639)
Solution: Upgrade to Opera 11.10 or later.
CVE-2011-2640
Symantec Web Gateway Detection
PVS ID: 5989 FAMILY: CGI RISK: INFO NESSUS ID:55627
Description: Synopsis :\n\nThe remote host is a web security appliance.\n\nThe remote host is running
Symantec Web Gateway, a web security gateway appliance.
Solution: N/A
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Symantec Web Gateway login.php Blind SQL Injection (SYM11-001)
PVS ID: 5990 FAMILY: CGI RISK: HIGH NESSUS ID:55628
Description: Synopsis : \n\nThe web security application running on the remote host has a SQL injection
vulnerability.\n\nFor your information, the observed version of Symantec Web Gateway
installed on the remote host is : \n %L \n\nVersions of Symantec Web Gateway 4.5 earlier
than 4.5.0.376 are potentially affected by a SQL injection vulnerability. Input to the
Family Internet Services 1631