(PVS) Signatures - Tenable Network Security

PVS ID: 4095 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is a Windows CE device. The remote client OS is \n%L\n\nThis version of Windows CE
has been reported prone to a number of Denial of Service (DoS) attacks. In addition, the
client is reported vulnerable to a buffer overflow. An attacker exploiting these flaws would
be able to either crash the client or execute arbitrary code.
Solution: Upgrade to version 5.1 or higher.
CVE Not available
Windows CE < 5.0 / 6.0 Buffer Overflow
PVS ID: 4096 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is a
Windows CE device. The remote client OS is \n%L\n\nThis version of Windows CE has
been reported prone to a buffer overflow. An attacker exploiting this flaw would be able to
execute arbitrary code on the remote device.
Solution: Upgrade to version 5.0, 6.0 or higher.
YaBB SE <
CVE Not available
PVS ID: 4097 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the
bypassing of authentication.\n\nThe remote host is running the YaBB SE forum
management system. There is a flaw in this version of YaBB SE that allows
authenticated users to escalate privileges and gain administrative access. The
'Profile.pl' and 'Register.pl' scripts fails to sanitize CRLF sequences. An attacker
can use this flaw to write data into their profile which gives them elevated
access.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2007-3295
IMAP User ID Enumeration
PVS ID: 4098 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is an IMAP client. The observed IMAP User ID was\n%L"
Solution: N/A
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1063