(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nA rogue DNS server may crash the remote proxy.\n\nThe remote version of
this software is vulnerable to a denial of service when processing invalid DNS responses.
An attacker may exploit this flaw to disable this service remotely. To exploit this flaw, an
attacker would need to be able to inject malformed DNS responses to the queries sent by
the remote application.
Solution: Upgrade to version 8.11.6 or higher.
CVE-2006-2072
ISC BIND < 9.3.3 DNS Message Malformed TSIG Remote DoS
PVS ID: 3523 FAMILY: DNS Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote BIND DNS server is vulnerable to a flaw in the way that it handles TSIG responses.
An attacker exploiting this flaw would need to have the ability to send malformed
responses to the vulnerable DNS Server. Successful exploitation would lead to the BIND
server crashing.
Solution: Upgrade to version 9.3.3 or higher.
CVE-2006-2073
Oracle 10g Application Server SQL Injection
PVS ID: 3524 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running a version of the Oracle 10g Application Server that is vulnerable to a remote
SQL injection attack. An attacker exploiting this flaw would gain limited access to the
remote database server. Successful exploitation would allow the attacker the ability to
execute SQL commands on the database server.
Solution: Upgrade to version 10.1.3.0.0 or higher.
CVE-2007-1609
ClamAV < 0.88.2 HTTP Header Remote Overflow
PVS ID: 3525 FAMILY: Web Clients
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running ClamAV, an antivirus application. The remote host is running version: \n %L
\n\nThere is a remote buffer overflow within this version of ClamAV. Specifically, if an
attacker were able to spoof or gain control of a ClamAV update server, the attacker could
craft a malicious HTTP response that would trigger a buffer overflow. Successful
exploitation would result in the execution of arbitrary code.
Family Internet Services 909