(PVS) Signatures - Tenable Network Security

Solution: http://www.microsoft.com/technet/security/bulletin/MS04-036.mspx
CVE-2004-0840
Microsoft NNTP Component Remote Overflow (883935)
PVS ID: 2360 FAMILY: Generic RISK: HIGH NESSUS ID:15465
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of Microsoft NNTP server that is vulnerable to a buffer overflow
issue.\n\nAn attacker may exploit this flaw to execute arbitrary commands on the remote
host with the privileges of the NNTP server process.
Solution: http://www.microsoft.com/technet/security/bulletin/MS04-036.mspx
CVE-2004-0840
MySQL < 3.23.59 Multiple Vulnerabilities (2)
PVS ID: 2361 FAMILY: Database RISK: HIGH NESSUS ID:15449
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a version of the MySQL database that is older than 3.23.59.\n\nMySQL is a
database that runs on both Linux/BSD and Windows platforms.\nThe remote version of this
software is vulnerable to specially crafted ALTER TABLE SQL query that can be
exploited to bypass some applied security restrictions or cause a denial of service.\n\nTo
exploit this flaw, an attacker would need the ability to execute arbitrary SQL statements on
the remote host.
Solution: Upgrade to version 3.23.59 or higher.
CVE-2004-0835
MySQL < 4.0.21 Multiple Vulnerabilities (2)
PVS ID: 2362 FAMILY: Database RISK: HIGH NESSUS ID:15449
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a version of the MySQL database that is older than 4.0.21.\n\nMySQL is a
database that runs on both Linux/BSD and Windows platforms.\nThe remote version of this
software is vulnerable to specially crafted ALTER TABLE SQL query that can be
exploited to bypass some applied security restrictions or cause a denial of service.\n\nTo
exploit this flaw, an attacker would need the ability to execute arbitrary SQL statements on
the remote host.
Solution: Upgrade to version 4.0.21 or higher.
CVE-2004-0835
Passive Vulnerability Scanner (PVS) Signatures
Squid < 2.5.STABLE7 SNMP ASN.1 Parser Remote DoS
Family Internet Services 596