(PVS) Signatures - Tenable Network Security

unauthenticated attacker can exploit these flaws to manipulate database queries, which may
lead to disclosure of sensitive information, modification of data or attacks against the
underlying database.
Solution: Upgrade to a version of higher than 0.7.20070307.
CVE-2007-3183
WordPress < 2.2.1 _wp_attached_file Metadata Unrestricted File Upload
PVS ID: 4114 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a script injection attack.\n\nThe version of
WordPress installed on the remote host is vulnerable to a file upload attack. An attacker
exploiting this flaw would only need to be able to send custom queries to the 'wp-app.php'
or 'app.php' script. Successful exploitation would result in the attacker uploading arbitrary
code that could then be executed with the privileges of the web server. The path to the
vulnerable version of WordPress is:\n%P
Solution: Upgrade to version 2.2.1 or higher.
CVE-2007-3543
Ingres Communications Server Detection
PVS ID: 4115 FAMILY: Database RISK: INFO NESSUS ID:25572
Description: Synopsis :\n\nA database service is listening on the remote host.\n\n The remote service is
an Ingres Communications Server, also known as a Net Server. This is the main process
component of Ingres Net and monitors communications between applications and DBMS
servers.
Solution: Limit incoming traffic to this port if desired.
CVE Not available
TrendMicro OfficeScan < 8.0.0.1042 Multiple Vulnerabilities
PVS ID: 4116 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a TrendMicro OfficeScan server. This version is reported to be vulnerable to
multiple flaws. The more serious of these flaws involves a buffer overflow. An attacker
exploiting these flaws would be able to execute arbitrary code on the remote OfficeScan
server.
Solution: Upgrade to version 8.0.0.1042 or higher.
CVE-2007-3454
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1068