(PVS) Signatures - Tenable Network Security

CVE-2011-0228
ClamAV < 0.97.2 'cli_hm_scan' Denial of Service
PVS ID: 5994 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is running an anti-virus application that is vulnerable to a
denial of service attack.\n\nThe reported version of ClamAV on the remote host is : \n %L
\n\nVersions of ClamAV earlier than 0.97.2 are potentially affected by a denial of service
vulnerability. An off-by-one error exists in the 'cli_hm_scan' function in the file
'libclamav/matcher-hash.c' that can be exploited by a specially crafted message causing the
clamd daemon to crash.
Solution: Upgrade to ClamAV 0.97.2 or later.
CVE Not available
phpMyAdmin 3.3.x < 3.3.10.3 / 3.4.x < 3.4.3.2 Multiple Vulnerabilities
PVS ID: 5995 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote web server contains a PHP application that is vulnerable to
multiple attack vectors.\n\nFor your information, the observed version of phpMyAdmin is :
\n %L \n\nVersions of phpMyAdmin 3.3.x earlier than 3.3.10.3 and 3.4.x earlier than
3.4.3.2 are potentially affected by multiple vulnerabilities : \n\n - A cross-site scripting
vulnerability exists in the table Print view. (PMASA-2011-9)\n\n - A local file inclusion
vulnerability can be exploited via a specially crafted MIME-type transformation parameter.
(PMASA-2011-10)\n\n - In the 'relational schema' code a parameter is not sanitized before
being used to concatenate a class name which could lead to a local file inclusion or code
execution. (PMASA-2011-11)\n\n - It is possible to manipulate the PHP superglobals
(including SESSION) using some of the Swekey authentication code. (PMASA-2011-12)
Solution: Upgrade to phpMyAdmin 3.3.10.3, 3.4.3.2, or later.
CVE-2011-2643
Apache Tomcat 7.0.x < 7.0.19 Multiple Vulnerabilities
PVS ID: 5996 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:55759
Description: Synopsis : \n\nThe remote web server is affected by multiple vulnerabilities.\n\nFor your
information, the observed version of Apache Tomcat installed on the remote host is : \n %L
\n\nVersions of Tomcat 7.0.x earlier than 7.0.19 are potentially affected by multiple
vulnerabilities : \n\n - An issue exists in the error handling related to the
MemoryUserDatabase that allows user passwords to be disclosed through log files.
(CVE-2011-2204)\n\n - An input validation issue exists that allows a local attacker to either
bypass security or carry out denial of service attacks when the APR or NIO connectors are
Family Internet Services 1633