(PVS) Signatures - Tenable Network Security

emote host.
Solution: Upgrade to version 5.0.7 or higher.
CVE-2006-0468
Ximian Evolution < 2.3.8 Inline XML Content-parsing Overflow
PVS ID: 3388 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of the Ximian Evolution email client that does not properly parse
user-supplied data. Specifically, this version of Evolution is reported to be vulnerable to a
flaw in the way that it handles inline XML attachments. A remote attacker can craft an
email message such that, upon opening, Evolution crashes or executes arbitrary code.
Solution: Upgrade to version 2.3.8 or higher.
HTTP Proxy Detection
CVE-2006-0040
PVS ID: 3389 FAMILY: Web Servers RISK: NONE NESSUS ID:Not Available
Description: The remote host is a proxy server. PVS has determined this due to the format of the HTTP
request. PVS observed a client issuing this request: \n%P\n\nThe server replied with: \n %L
Solution: N/A
CVE Not available
Winamp < 5.13 Malformed Playlist File Handling Overflow
PVS ID: 3390 FAMILY: Generic RISK: HIGH NESSUS ID:20826
Description: Synopsis :\n\nA multimedia application that is affected by a buffer overflow vulnerability
is installed on the remote Windows host.\n\nThe remote host is using Winamp, a popular
media player for Windows. It's possible that a remote attacker using a specially-crafted
playlist can cause a buffer overflow in the version of Winamp installed on the remote host
resulting in a crash of the application or even execution of arbitrary code remotely subject
to the user's privileges. This flaw can reportedly be exploited without user interaction by
linking to a '.pls' file in an IFRAME tag.
Solution: Upgrade to version 5.13 or higher.
PmWiki <
CVE-2005-3188
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3391 FAMILY: CGI NESSUS ID:Not Available
Family Internet Services 871