(PVS) Signatures - Tenable Network Security

PVS ID: 1773 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: The remote host is using a version of Mozilla or Mozilla Thunderbird that is vulnerable to a
heap overflow vulnerability. A heap overflow has been reported for the Mozilla POP3 mail
handler routines. An attacker controlled POP3 server may be able to execute arbitrary code
on the client machine.
Solution: Upgrade to Mozilla 1.7.1 / Thunderbird 0.7.1 or higher.
CVE-2004-0757
Opera < 7.54.0 Remote Location Object XSS
PVS ID: 1774 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a cross-site scripting (XSS) attack.\n\nThe
remote host is using Opera, which is affected by a remote location object cross-domain
scripting issue. An attacker may gain access to directory contents, files and email messages
that are read using Opera's email utilities.
Solution: Install Opera 7.54.0 or higher.
CVE-2004-2570
Mozilla XML User Interface Language Browser Interface Spoofing
PVS ID: 1775 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: The remote host is using a version of Mozilla that is vulnerable to multiple user interface
spoofing issues that may allow a rogue web server to mimic the interface of a trusted web
site and prompt users to submit sensitive or private information.
Solution: Upgrade to the newest version.
CVE-2004-0763
Pavuk < 0.928r3 Digest Authentication Remote Overflow
PVS ID: 1776 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: The remote host is using a version of Pavuk, a web spider, that is vulnerable to an
authentication buffer overflow. An attacker can construct a malicious website that is
designed to trigger the vulnerability and run arbitrary code on the client machine.
Solution: Upgrade to 0.928r3 or higher.
CVE-2004-1437
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 451