(PVS) Signatures - Tenable Network Security

PVS ID: 1220 FAMILY: Generic RISK: HIGH NESSUS ID:12240
Description: Synopsis :\n\nThe remote host is vulnerable to a heap overflow\n\nThe remote CVS server,
according to its version number, might allow an attacker to execute arbitrary commands on
the remote system because of a heap overflow in the cvs pserver code.
Solution: Upgrade to CVS 1.11.16, 1.12.8, or later.
CVE-2004-0396
Apache < 1.3.31 / 2.0.49 Error Log Escape Sequence Injection
PVS ID: 1221 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:12239
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw in the way that it displays log
files\n\nThe target host is running an Apache web server that allows for the injection of
arbitrary escape sequences into its error logs. An attacker might use this vulnerability in an
attempt to exploit similar vulnerabilities in terminal emulators.
Solution: Upgrade to Apache version 1.3.31, 2.0.49 or newer.
CVE-2003-0020
Winamp Fasttracker 2 Plug-in in_mod.dll Heap Overflow
PVS ID: 1222 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote client is
running a version of the Nullsoft Winamp media player that may be vulnerable to a heap
overflow. This vulnerability may be used to remotely crash the client or possible execute
arbitrary code.
Solution: Upgrade to the latest version of Winamp.
CVE-2004-1896
Winamp b4s File Handling Multiple Malformed Fields Overflow
PVS ID: 1223 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nWinamp versions 3.0
build 488 and below suffer from a vulnerability in the processing of B4S files.
Solution: Upgrade to the latest version of Nullsoft's Winamp.
CVE-2003-1272
H323 Application Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 1224 FAMILY: Generic RISK: LOW NESSUS ID:12243
Family Internet Services 311