(PVS) Signatures - Tenable Network Security

RISK:
MEDIUM
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running ZoneAlarm, a personal firewall for the Windows platform. The
client is running a version of ZoneAlarm that is less than 6.1.737.000. This version of
ZoneAlarm is reported to be vulnerable to a number of flaws that can render the firewall
unuseable or, in some instances, give the users a false sense of security.
Solution: Upgrade to version 6.1.737.000 or higher.
CVE Not available
Mac OS X Multiple Vulnerabilities (Security Update 2005-009)
PVS ID: 3308 FAMILY: Operating System Detection RISK: HIGH NESSUS ID:20249
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Apple Mac OS X, but lacks Security Update 2005-009. This security update
contains fixes for the following applications :\n- Apache2\n- Apache_mod_ssl\n-
CoreFoundation\n- curl\n- iodbcadmintool\n- OpenSSL\n- passwordserver\n- Safari\nsudo\n-
syslog
Solution: Upgrade or patch according to vendor recommendations.
Opera <
CVE-2005-3704
PVS ID: 3309 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is using a version of Opera that is vulnerable to a number of remote Denial of
Service (DoS) attacks. An attacker exploiting these flaws would need to be able to convince
a user to browse to a malicious URI. Successful exploitation would result in the browser
crashing.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-3946
SQL Injector SQL Injection Tool Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3310 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: The remote host is running SQL Injector. SQL Injector is a tool that automates SQL
Injection queries and tests database applications. Given a form or script that is vulnerable to
SQL Injection, SQL Injector will take care of all the brute-forcing necessary to exploit the
remote database. The script that SQL Injector appears to be targeting is\n\n%L
Family Internet Services 853