(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 7.1.3 or higher.
CVE-2006-4382
Moodle < 1.6.2 Multiple Vulnerabilities
PVS ID: 3742 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Moodle, an open-source content-management system written in PHP. This
version of Moodle is vulnerable to a SQL Injection flaw, a cross-site scripting flaw, and an
information disclosure flaw. An attacker exploiting these flaws would only need to be able
to send malformed HTTP requests to the server. Successful exploitation would result in
arbitrary SQL command execution on the remote database server, code execution within
client browsers, or gleaning of information useful in future attacks.
Solution: Upgrade to version 1.6.2 or higher.
CVE-2006-4785
Firefox < 1.5.0.7 Multiple Viulnerabilities
PVS ID: 3743 FAMILY: Web Clients RISK: HIGH NESSUS ID:22369
Description: Synopsis :\n\nThe remote Windows host contains a web browser that is affected by
multiple vulnerabilities.\n\nThe installed version of Firefox is affected by multiple security
issues, some of which may lead to execution of arbitrary code on the affected host subject
to the user's privileges.
Solution: Upgrade to version 1.5.0.7 or higher.
CVE-2006-4566
SeaMonkey < 1.0.5 Multiple Vulnerabilities
PVS ID: 3744 FAMILY: Web Clients RISK: HIGH NESSUS ID:22371
Description: Synopsis :\n\nA web browser on the remote host is prone to multiple flaws.\n\nThe
installed version of SeaMonkey has various security issues, some of which may lead to
execution of arbitrary code on the affected host subject to the user's privileges.
Solution: Upgrade to version 1.0.5 or higher.
CVE-2006-4566
Passive Vulnerability Scanner (PVS) Signatures
Mozilla Thunderbird < 1.5.0.7 Multiple Vulnerabilities
PVS ID: 3745 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:22370
Family Internet Services 967