(PVS) Signatures - Tenable Network Security

MySQL < 4.0.21 Remote GRANT Privilege Escalation
PVS ID: 2370 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:15477
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote host is running a version of MySQL that is older than
version 4.0.21.\nIt is vulnerable to a flaw that may allow an attacker to gain access to
unauthorized databases. An attacker can exploit this vulnerability if he has GRANT
privileges on databases containing '_'.
Solution: Upgrade to version 4.0.21 or higher.
CVE-2004-0957
PuTTY < 0.56 Remote SSH2_MSG_DEBUG Buffer Overflow
PVS ID: 2371 FAMILY: SSH
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using a vulnerable version of PuTTY, a SSH client built for Linux and UNIX variants as
well as Microsoft Windows operating systems. It has been reported that PuTTY does not
safely handle SSH2_MSG_DEBUG messages. As a result, an attacker may be able to
exploit it by setting up a mallicious SSH server. The version of PuTTY installed on the
remote host is: %L
Solution: Upgrade to PuTTY 0.56 or higher.
CVE-2004-1008
Bugzilla Authentication Bypass and Information Disclosure
PVS ID: 2372 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:15562
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote server is running Bugzilla, a bug tracking system. There is a
flaw in the remote installation of Bugzilla that may allow an attacker to bypass
authentication or to get access to private bug reports.
Solution: Upgrade to version 2.14.5, 2.16.2, 2.17.3 or higher.
CVE-2004-1634
Opera < 7.55.0 Cross-Domain Dialog Box Spoofing
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2373 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Family Internet Services 599