(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote web server uses a version of PHP that is affected by a
man-in-the-middle attack.\n\nFor your information, the version of PHP installed on the
remote host is :\n %L \n\nPHP versions 5.4.x earlier than 5.4.11 are affected by a weakness
in the cURL extension that call allow SSL spoofing and man-in-the-middle
attacks.\n\nWhen attempting to validate a certificate, the cURL library (libcurl) fails to
verify that a server hostname matches a domain name in an X.509 certificate's 'Subject
Common Name' (CN) or 'SubjectAltName'.\n\nNote that this plugin does not attempt to
verify whether the PHP install has been built with the cURL extention but instead relies
only on PHP's self-reported version number.
Solution: Upgrade to PHP version 5.4.11 or later.
CVE Not available
Google Chrome < 24.0.1312.56 Multiple Vulnerabilities
PVS ID: 6673 FAMILY: Web Clients RISK: HIGH NESSUS ID:63645
Description: Synopsis :\n\nThe remote host contains a web browser that is affected by multiple
vulnerabilities.\n\nFor your information, the observed version of Google Chrome is :\n %L
\n\nVersions of Google Chrome earlier than 24.0.1312.56 are potentially affected by the
following vulnerabilities :\n\n - A use-after-free vulnerability exists related to font handling
and canvas. (CVE-2013-0839)\n\n - An error exists related to URL validation and the
opening of new browser windows. (CVE-2013-0840)\n\n - An array index is not properly
checked in relation to content blocking. (CVE-2013-0841)\n\n - An unspecified error exists
related to handling null characters in embedded paths. (CVE-2013-0842)\n\nSuccessful
exploitation of some of these issues could lead to an application crash or even allow
arbitrary code execution, subject to the user's privileges.
Solution: Upgrade to Google Chrome 24.0.1312.56 or later.
CVE-2013-0842
MySQL Server 5.5.x < 5.5.29 Multiple Vulnerabilities
PVS ID: 6674 FAMILY: Database RISK: HIGH NESSUS ID:63618
Description: Synopsis :\n\nThe remote database server is affected by multiple vulnerabilities.\n\nFor
your information, the observed version of MySQL server is \n %L \n\nThe version of
MySQL 5.5 installed on the remote host is earlier than 5.5.29. Therefore, affected by
vulnerabilities in the following components :\n\n - Information Schema\n\n - InnoDB\n\n -
MyISAM\n\n - Server\n\n - Server Locking\n\n - Server Optimizer\n\n - Server Parser\n\n -
Server Partition\n\n - Server Privileges\n\n - Server Replication\n\n - Stored Procedure
Solution: Upgrade to MySQL Server 5.5.29 or later
CVE-2013-0389
Passive Vulnerability Scanner (PVS) Signatures
MySQL Server 5.1.x < 5.1.67 Multiple Vulnerabilities
Family Internet Services 1836