(PVS) Signatures - Tenable Network Security

RealNetwork RealPlayer Unspecified Remote Vulnerability
PVS ID: 1777 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: The remote host is running a vulnerable version of RealPlayer. An attacker may execute
arbitrary code on a computer running the player.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-1437
Neon < 0.23.8 Status Response Control Character Inclusion Vulnerability
PVS ID: 1778 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: The remote host is using software based on a vulnerable version of the Neon Library, an
open-source HTTP and WebDAV client library. Applications that use this version of the
Neon library may disclose sensitive information to an attacker.
Solution: Upgrade to Neon library 0.23.8 or higher.
CVE Not available
Neon < 0.24.5 WebDAV Client Library Format String Vulnerabilities
PVS ID: 1779 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: The remote host is using software based on a vulnerable version of the Neon Library, an
open-source HTTP and WebDAV client library. An attacker running a malicious WebDAV
server may execute arbitrary code on the host.
Solution: Upgrade to Neon library 0.24.5 or higher.
CVE-2004-0179
Neon < 0.24.6 WebDAV Client Library ne_rfc1036_parse Function Heap Overflow
PVS ID: 1780 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using software based on a vulnerable version of the Neon Library, an open-source HTTP
and WebDAV client library. Depending of the application using the library, an attacker
running a malicious WebDAV server may execute arbitrary code on the host or create a
denial of service.
Solution: Upgrade to Neon library 0.24.6 or higher.
CVE-2004-0398
Passive Vulnerability Scanner (PVS) Signatures
Neon < 0.24.7 WebDAV Client Library Unspecified Vulnerability
Family Internet Services 452