(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 1.2.4 or higher.
CVE-2006-1505
Mac OS X < 10.4.6 Multiple Vulnerabilities
PVS ID: 3502 FAMILY: Operating System Detection RISK:
MEDIUM
NESSUS ID:21175
Description: Synopsis :\n\nThe remote host is missing a Mac OS X update that fixes a security
issue.\n\nThe remote host is running a version of Mac OS X 10.4 that is older than version
10.4.6. Mac OS X 10.4.5 contains several security fixes for a local authentication bypass
vulnerability. A malicious local user may exploit this vulnerability to bypass the firmware
password and gain access to Single User mode.
Solution: Upgrade to version 10.4.6 or higher.
CVE-2006-0401
NOD32 < 2.51.26 Antivirus Local File Overwrite
PVS ID: 3503 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote antivirus software can be tricked by local users into replacing
system files.\n\nThe remote host is running the NOD32 antivirus software. This software is
vulnerable to a flaw where local users can execute arbitrary code by quarantining a file and
then 'restoring' the file in such a manner that, when next executed, the file is run with
SYSTEM privileges.
Solution: Upgrade to version 2.51.26 or higher.
CVE-2006-1649
McAfee WebShield < 4.5 MR2 Bounced Emails Format String
PVS ID: 3504 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a remote 'format string' flaw.\n\nThe remote
host is running the McAfee WebShield SMTP server. This version of WebShield is
vulnerable to a flaw in the way that it processes 'bounced' emails. An attacker can send a
malformed email that, upon being bounced, will overflow the remote mail server.
Solution: Upgrade to version 4.5 MR2 or higher.
CVE-2006-0559
ClamAV < 0.88.1 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3505 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Family Internet Services 903