(PVS) Signatures - Tenable Network Security

flaw would need to be able to entice an iTunes user into opening a malformed file.
Successful exploitation would result in the attacker executing arbitrary code on the remote
system.
Solution: Upgrade to version 7.4.0 or higher.
CVE-2007-3752
Gallery < 2.2.3 Information Disclosure
PVS ID: 4205 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to unspecified remote attack vectors.\n\nThe
remote host is running Gallery, a web-based photo album application written in PHP. The
version of Gallery installed on the remote host is lower than 2.2.3. The vendor has reported
multiple security flaws in this version. It is alleged that a remote attacker can use these
flaws to replace and/or modify program files.
Solution: Upgrade to version 2.2.3 or higher.
CVE-2007-4650
Lighttpd < 1.4.18 mod_fastcgi HTTP Request Header Overflow
PVS ID: 4206 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Lighttpd, a small web server. This version of Lighttpd is vulnerable to a buffer
overflow via the 'mod_fastcgi' module. An attacker exploiting this flaw would only need
the ability to send large, malformed requests to the 'mod_fastcgi' module. Successful
exploitation would result in the attacker executing arbitrary code.
Solution: Upgrade to 1.4.18 or higher.
CVE-2007-4727
Passive Vulnerability Scanner (PVS) Signatures
Hexamail < 3.0.1.004 POP3 Service USER Command Overflow
PVS ID: 4207 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Hexamail, an SMTP server, version %L\nThis version of Hexamail is vulnerable to
a buffer overflow in its POP3 service when passed a large string to the 'USER' directive.
An attacker exploiting this flaw would only need to be able to connect to the POP3 port
(default TCP/110) on the remote server. Successful exploitation would result in the attacker
executing arbitrary code.
Solution: Upgrade to version 3.0.1.004 or higher.
Family Internet Services 1093