The Passive Vulnerability Scanner (PVS) Plugins
http://www.tenablesecurity.com/tenable_plugins.pdf
All the newest security checks for the Tenable Passive Vulnerability Scanner (PVS)PVS Pluginshttp://www.tenablesecurity.com/images/RssLogo.jpg
http://www.tenablesecurity.com/
Opera < 9.51
Synopsis :
The remote host is vulnerable to multiple attack vectors
The remote host is running a version of Opera browser which is vulnerable to several flaws. The browser is vulnerable to a remote overflow due to some unspecified flaw. In addition, the browser is vulnerable to an information-disclosure flaw wherein an attacker can gain access to data stored in memory. An attacker, exploiting these flaws, would be able to execute arbitrary code or view arbitrary data.
CVSS Base Score : 6.8 CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Copyright Tenable Network Security Inc. 2007]]>2008-07-04T06:37:00-05:00
http://www.tenablesecurity.com/4572.html
Jabber server detection
The remote host is a Jabber server. Jabber is an open-source instant messaging server.
Copyright Tenable Network Security Inc. 2007]]>2008-07-04T06:37:00-05:00
http://www.tenablesecurity.com/4571.html
Jabber client detection
The remote host is a Jabber client.
Copyright Tenable Network Security Inc. 2007]]>2008-07-04T06:37:00-05:00
http://www.tenablesecurity.com/4570.html
VLC Media Player < 0.8.6i Multiple Vulnerabilities
Synopsis :
The remote host is vulnerable to a buffer overflow
The remote host is running VLC Media Player version: %L
This version is vulnerable to a remote buffer overflow due to a lack of content-parsing within the 'modules/demux/wav.c' module. An attacker, exploiting this flaw, would need to be able to entice a local VLC user into opening a malicious .WAV file or stream. Successful exploitation would result in the attacker executing arbitrary code.
CVSS Base Score : 6.8 CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
The remote Windows host contains a web browser that is affected by multiple vulnerabilities.
The installed version of SeaMonkey is affected by various securityissues :
- Several stability bugs leading to crashes which, in some cases, show traces of memory corruption (MFSA 2008-21). - A vulnerability involving violation of the same-origin policy could allow for cross-site scripting attacks (MFSA 2008-22). - JavaScript can be injected into the context of signed JARs and executed under the context of the JAR's signer (MFSA 2008-23). - By taking advantage of the privilege level stored in the pre-compiled 'fastload' file. an attacker may be able to run arbitrary JavaScript code with chrome privileges (MFSA 2008-24). - Arbitrary code execution is possible in 'mozIJSSubScriptLoader.loadSubScript()' (MFSA 2008-25). - An attacker can steal files from known locations on a victim's computer via originalTarget and DOM Range (MFSA 2008-27). - It is possible for a malicious Java applet to bypass the same-origin policy and create arbitrary socket connections to other domains (MFSA 2008-28). - An improperly encoded '.properties' file in an add-on can result in uninitialized memory being used, which could lead to data formerly used by other programs being exposed to the add-on code (MFSA 2008-29). - File URLs in directory listings are not properly HTML-escaped when the filenames contained particular characters (MFSA 2008-30). - A weakness in the trust model regarding alt names on peer-trusted certs could lead to spoofing secure connections to any other site (MFSA 2008-31). - URL shortcut files on Windows (for example, saved IE favorites) could be interpreted as if they were in the local file context when opened by Seamonkey, although the referenced remote content would be downloaded and displayed (MFSA 2008-32). - A crash in Mozilla's block reflow code could be used by an attacker to crash the browser and run arbitrary code on the victim's computer (MFSA 2008-33).
CVSS Base Score : 9.3 CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
The remote Windows host contains a web browser that is affected by multiple vulnerabilities.
The installed version of Firefox is affected by various securityissues :
- Several stability bugs leading to crashes which, in some cases, show traces of memory corruption (MFSA 2008-21). - A vulnerability involving violation of the same-origin policy could allow for cross-site scripting attacks (MFSA 2008-22). - JavaScript can be injected into the context of signed JARs and executed under the context of the JAR's signer (MFSA 2008-23). - By taking advantage of the privilege level stored in the pre-compiled 'fastload' file. an attacker may be able to run arbitrary JavaScript code with chrome privileges (MFSA 2008-24). - Arbitrary code execution is possible in 'mozIJSSubScriptLoader.loadSubScript()' (MFSA 2008-25). - An attacker can steal files from known locations on a victim's computer via originalTarget and DOM Range (MFSA 2008-27). - It is possible for a malicious Java applet to bypass the same-origin policy and create arbitrary socket connections to other domains (MFSA 2008-28). - An improperly encoded '.properties' file in an add-on can result in uninitialized memory being used, which could lead to data formerly used by other programs being exposed to the add-on code (MFSA 2008-29). - File URLs in directory listings are not properly HTML-escaped when the filenames contained particular characters (MFSA 2008-30). - A weakness in the trust model regarding alt names on peer-trusted certs could lead to spoofing secure connections to any other site (MFSA 2008-31). - URL shortcut files on Windows (for example, saved IE favorites) could be interpreted as if they were in the local file context when opened by Firefox, although the referenced remote content would be downloaded and displayed (MFSA 2008-32). - A crash in Mozilla's block reflow code could be used by an attacker to crash the browser and run arbitrary code on the victim's computer (MFSA 2008-33).
CVSS Base Score : 9.3 CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Copyright Tenable Network Security Inc. 2007]]>2008-07-04T06:37:00-05:00
http://www.tenablesecurity.com/4567.html
RatProxy detection
The remote host is a RatProxy proxy server. RatProxy is a passive web application scanner which acts as a middle-man to normal browser-based HTTP traffic.
Copyright Tenable Network Security Inc. 2007]]>2008-07-04T06:37:00-05:00
http://www.tenablesecurity.com/4566.html
Sun Java System Access Manager version detection
The remote host is running the Sun Java System Access Manager, an application for managing access to web applications. The reported version is: %L
Copyright Tenable Network Security Inc. 2007]]>2008-07-04T06:37:00-05:00
http://www.tenablesecurity.com/4565.html
Mac OS X < 10.5.4
Synopsis :
The remote host is missing a Mac OS X update that fixes various security issues.
The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.4. Mac OS X 10.5.4 contains security fixes for a number of programs.
CVSS Base Score : 10.0 CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
There is a tape backup manager installed on the remote host.
The remote host is running a EMC AlphaStor Library Manager service. AlphaStor is a tape backup management and library sharing for EMC NetWorker. For your information, the reported OS/platform information is: %L