(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a SQL injection attack.\n\nThe remote host
is running the Simple Machines Forum (SMF), a web forum. This version of SMF is
vulnerable to a flaw in the way that it handles user-supplied data. Data passed to the
'SMFCookie218' parameter of the 'index.php' script can contain SQL queries that are
ultimately run against the default database server. An attacker exploiting this flaw would be
able to execute arbitrary SQL commands against the default database server.
Solution: Upgrade to version 1.1.4 or higher.
CVE-2007-5646
Vanilla Forum < 1.1.4 sortcategories.php CategoryID Parameter SQL Injection
PVS ID: 4258 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL injection attack.\n\nThe remote host
is running the Vanilla Forum, a web forum. This version of Vanilla is vulnerable to a flaw
in the way that it handles user-supplied data. Data passed to the 'CategoryID' parameter of
the 'sortcategories.php' script can contain SQL queries that are ultimately run against the
default database server. An attacker exploiting this flaw would be able to execute arbitrary
SQL commands against the default database server.
Solution: Upgrade to version 1.1.4 or higher.
Simple PHP Blog <
CVE-2007-5643
PVS ID: 4259 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running the Simple PHP Blog, web log (or blog) package version '%L'.\n\nThis version
of Simple PHP Blog is vulnerable to multiple flaws that, at worst, allow the ability for a
remote attacker to execute local script code. An attacker exploiting these flaws would only
need the ability to send valid web requests to the application. Successful exploitation would
result in a loss of confidentiality, integrity, and availability.
Solution: No solution is known at this time.
CVE Not available
Delegate < 9.7.5 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4260 FAMILY: POP Server RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Delegate, a proxy server. This version of Delegate is vulnerable to
multiple remote Denial of Service (DoS) attacks. An attacker exploiting these flaws would
be able to impact the availability of the proxy server.
Family Internet Services 1108