(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is running an application that is vulnerable to multiple
vulnerabilities.\n\nThe remote host is running RealPlayer, a multi-media application. For
your information, the observed build of RealPlayer is:\n %L .\n\nRealPlayer builds earlier
than 15.0.6.14 are potentially affected by multiple vulnerabilities :\n\n - A buffer overflow
error exists related to 'AAC' handling, specifically unpacking of the stream data.
(CVE-2012-2407)\n\n - A heap-corruption error exists related to the 'AAC SDK' decoding.
(CVE-2012-2408)\n\n - Two unspecified buffer overflow errors exist related to
'RealMedia'. (CVE-2012-2409, CVE-2012-2410)\n\n - A divide-by-zero error exists related
to 'RealAudio' and codec frame size. (CVE-2012-3234)
Solution: Upgrade to RealPlayer 15.0.6.14 or later.
CVE-2012-3234
iTunes < 10.7 Multiple Vulnerabilities
PVS ID: 6575 FAMILY: Web Clients RISK: HIGH NESSUS ID:62077
Description: Synopsis :\n\nThe remote host contains a multimedia application that has multiple
vulnerabilities.\n\nThe remote host has iTunes installed, a popular media player for
Windows and Mac OS. For your information, the observed version of iTunes is:\n %L
\n\nVersions of iTunes earlier than 10.7 are reportedly affected by multiple memory
corruption vulnerabilities in WebKit.
Solution: Upgrade to iTunes 10.7 or later.
CVE-2012-3712
Apache 2.2 < 2.2.23 Multiple Vulnerabilities
PVS ID: 6576 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:62101
Description: Synopsis :\n\nThe remote web server uses a version of Apache that is affected by multiple
vulnerabilities.\n\nFor your information, the version of Apache installed on the remote host
is :\n %L \n\nApache versions earlier than 2.2.23 are affected by the following
vulnerabilities.\n\n - The utility 'apachectl' can receive a zero-length directory name in the
LD_LIBRARY_PATH via the 'envvars' file. A local attacker with access to that utility
could exploit this to load a malicious Dynamic Shared Object (DSO), leading to arbitrary
code execution. (CVE-2012-0883)\n\n - An input validation error exists related to
'mod_negotiation', 'Multiviews' and untrusted uploads that can allow cross-site scripting
attacks. (CVE-2012-2687)
Solution: Upgrade to Apache version 2.2.23 or later.
CVE-2012-2687
JustCloud 'Cloud' Backup Service Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 6577 FAMILY: Internet Services RISK: INFO NESSUS ID:Not Available
Family Internet Services 1799