(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host
appears to be running Gaim, a popular open-source multi-protocol instant messenger. It is
reported that this version of Gaim is prone to multiple vulnerabilities that may allow an
attacker to disable this client remotely or to execute arbitrary code on the remote host.
Solution: Update to Gaim 1.0.2 or higher.
CVE Not available
Serendipity < 0.7.0rc1 HTTP Response Splitting
PVS ID: 2367 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:15543
Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
remote host is running Serendipity, a weblog written in PHP.\nThe remote version of this
software is vulnerable to a HTTP response splitting vulnerability that may allow an attacker
to perform a cross-site scripting attack against the remote host.
Solution: Upgrade to Serendipity 0.7.0rc1 or higher.
CVE-2004-1620
MacOS X Application Crash Plaintext Report
PVS ID: 2368 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:Not Available
Description: The remote MacOS X Client is reporting a MacOS application error via the network.
Solution: Ensure that passing such reports via the Internet is in accordance with existing corporate
policies. The reports usually include crash dumps that may contain sensitive information
about the remote host environment.
CVE Not available
MySQL < 4.0.21 Remote FULLTEXT Search DoS
PVS ID: 2369 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:15477
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running a version of MySQL that is older than version 4.0.21.\nIt is
vulnerable to a flaw that may allow an attacker to cause a Denial Of Service. An attacker
can exploit this vulnerability by using the FULLTEXT search functionality.
Solution: Upgrade to version 4.0.21 or higher.
CVE-2004-0956
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 598