(PVS) Signatures - Tenable Network Security

cookies).
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
ColdFusion Error Page XSS
PVS ID: 2893 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: The remote host is running Macromedia ColdFusion, a web application server. This version
of ColdFusion is vulnerable to a Cross-Site Scripting (XSS) flaw in the way that it handles
displaying error pages. An attacker exploiting this flaw would need to be able to convince a
user to browse to a malicious URI. Further, the Macromedia site would need to be utilizing
the JRUN web server (installed by default, but not recommended for production services).
Successful exploitation would result in the potential loss of confidential data (such as
authentication cookies).
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
Gaim < 1.3.0 Multiple Vulnerabilities
PVS ID: 2894 FAMILY: Internet Messengers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
appears to be running Gaim, a popular open-source, multi-protocol instant messenger. It is
reported that this version of Gaim is vulnerable to several remote flaws. Namely\n\n1) The
MSN protocol module is vulnerable to a remote Denial of Service (DoS) attack when sent a
NULL SLP message. Successful exploitation results in the application crashing.\n\n2)
Gaim instant messages support the sending of links (URIs). This version of Gaim only
supports links of 8192 bytes or less. An attacker sending a link of more than 8192 bytes can
overwrite memory and execute arbitrary code.
Solution: Update to Gaim 1.3.0 or higher.
CVE-2005-1261
Bakbone NetVault < 7.1.1 Unspecified Remote Overflow
PVS ID: 2895 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Bakbone NetVault, an enterprise backup/restore application. This version of
NetVault is reported to be vulnerable to a remote heap overflow. The details of the flaw are
not currently known. It is believed that a successful attack would lead to arbitrary code
being executed.
Solution: Upgrade to version 7.1.1 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 749