(PVS) Signatures - Tenable Network Security

Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
Apple iTunes < 4.7.1 Playlist Buffer Overflow
PVS ID: 2519 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is using iTunes, a media player application for Windows and Mac OS X. The
remote version of this software is vulnerable to a buffer overflow. This may allow an
attacker to execute code on the remote host. An attacker needs to send a malicious playlist
to the user to exploit this flaw.
Solution: Upgrade to version 4.7.1 or higher.
CVE-2005-0043
Squid Proxy < 2.5.STABLE8 Multiple Vulnerabilities
PVS ID: 2520 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote Squid caching proxy, according to its version number, may be vulnerable to a
remote denial of service.\n\nThis flaw is caused due to an input validation error in the
NTLM module.\n\nAn attacker can exploit this flaw to crash the server with a specially
crafted packet.\n\nThe remote Squid proxy is also vulnerable to a cache-corruption flaw
due to incorrect parsing of malformed HTTP headers. An attacker exploiting this flaw
would be able to poison the cache.\n\nThe remote Squid proxy is vulnerable to an
authentication bypass\nin the squid_ldap_auth module as well as a remote overflow due to
oversized HTTP headers.
Solution: Upgrade to Squid 2.5.STABLE8 or higher.
CVE-2005-0211
Gracebyte Network Assistant Remote DoS
PVS ID: 2521 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is using Gracebyte Network Assistant, a chat and instant messenger program
for home and small office. The remote version of this software is vulnerable to a denial of
service flaw. This may allow an attacker to crash the remote service.
Solution: No solution is known at this time.
CVE Not available
VideoDB < 2.0.2 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 641