(PVS) Signatures - Tenable Network Security

PVS ID: 2380 FAMILY: Web Clients RISK: HIGH NESSUS ID:17637
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running an older version of Quicktime player for Microsoft Windows. This version is
vulnerable to a remote overflow. A remote attacker exploiting this flaw would need to
create a malicious Quicktime file and entice the user to play it. A successful exploit would
allow the attacker to execute random code within the context of the local machine.
Additionally, there is a similar flaw within the Quicktime library that displays JPEG files.
An attacker exploiting this second flaw would need to be able to convince a user into
viewing a malicious JPEG file within the Quicktime viewer. Successful exploitation would
result in arbitrary code being executed on the victim system.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-0988
RealPlayer Skin File Handling Buffer Overflow
PVS ID: 2381 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of RealPlayer which is vulnerable to an overflow via a malformed skin
file. As skin files are downloaded, typically, without any sort of warning or prompt to the
user, the remote attacker need only create a website with a malformed skins file and entice
the user to visit the site.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-1094
Caudium Web Server < 1.4.4 RC2 Malformed URI DoS
PVS ID: 2382 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Caudium Web Server. The version being run is vulnerable to an
attack where a malformed URI causes the web server to stop responding to requests. An
attacker exploiting this flaw would only need to be able to connect to the Webserver and
issue an HTTP 'GET' request.
Solution: Upgrade to version 1.4.4 RC2 or higher.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Cherokee Web Server < 0.4.17.1 auth_pam Authentication Format String
PVS ID: 2383 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Family Internet Services 602