(PVS) Signatures - Tenable Network Security

CVE-2002-1565
Curl < 7.4.1 Long Error Message Buffer Overflow
PVS ID: 1745 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: The remote host is using a version of curl (or libcurl) which is vulnerable to a remote buffer
overflow. To exploit it, an attacker would have to set up a rogue web server which would
reply with maliciously-formed error messages. It was determined the remote host is using :
\n%L
Solution: Upgrade to curl 7.4.1 or higher.
CVE-2000-0973
Mozilla < 0.9 Predictable Temporary File Name File Deletion
PVS ID: 1746 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: The remote host is using a version of the Mozilla web browser that uses predictable
temporary file names. A local attacker may use this flaw to delete arbitrary files on this
host. It was determined the remote host is using : \n%L
Solution: Upgrade to Mozilla 0.9 or higher.
CVE Not available
Mozilla < 0.9.7 Null Byte Cookie Disclosure
PVS ID: 1747 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: The remote host is using a version of the Mozilla web browser that may allow an attacker
to steal the cookies of the users because of the way Mozilla handles null characters in its
URLs. It was determined the remote host is running : \n%L
Solution: Upgrade to Mozilla 0.9.7 or higher.
CVE-2002-2013
Mozilla < 1.0rc2 Local File Detection
PVS ID: 1748 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: The remote host is using a version of the Mozilla web browser that may allow a rogue web
server to determine the existence of files on the side of the client.
Solution: Upgrade to Mozilla 1.0rc2 or higher.
CVE-2002-0594
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 444