(PVS) Signatures - Tenable Network Security

libNSS Hello Challenge Remote Heap Overflow
PVS ID: 2133 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a vulnerable version of the Mozilla web browser. This version is based on a
vulnerable version of libNSS, the Network Security Service library that implements the
SSL/TLS protocol. It is reported that versions of libNSS up to 3.9.0 are prone to a remote
heap overflow in the processing of the 'hello' message. An attacker may use this overflow
to execute arbitrary code on the remote host.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-0826
libNSS Hello Challenge Remote Heap Overflow
PVS ID: 2134 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host
seems to be running a vulnerable version of the Netscape Enterprise Server, iPlanet or Sun
ONE Web Server. This version is based on a vulnerable version of libNSS, the Network
Security Service library that implements the SSL/TLS protocol. It is reported that versions
of libNSS up to 3.9.0 are prone to a remote heap overflow in the processing of the 'hello'
message. An attacker may use this overflow to execute arbitrary code on the remote host.
PVS detected the following version of the webserver: \n %L
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-0826
Bird Chat Server Invalid User DoS
PVS ID: 2135 FAMILY: Internet Messengers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running a vulnerable version of Bird Chat Server. Bird Chat Server is a small
chat server for Windows. It is reported that versions up to 6.10 are prone to an issue that
permit an attacker connecting with a fake username on the server to remotely crash all
clients using the server.
Solution: No solution is known at this time.
CVE-2004-1739
Icecast list.cgi User-Agent XSS
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2136 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Family Internet Services 532