(PVS) Signatures - Tenable Network Security

Snitz Forum < 3.4.0.07 active.asp BuildTime Parameter SQL Injection
PVS ID: 4306 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL injection attack.\n\nThe remote host
appears to be running Snitz Forum, a web forum application implemented in ASP. This
version of Snitz ('%L') is reported to be vulnerable to a SQL injection flaw within the
'active.asp' script. An attacker exploiting this flaw would send specially formed HTTP
queries to the active.asp script. These queries would include SQL statements that would
ultimately be executed on the database utilized by Snitz.
Solution: Upgrade to version 3.4.0.07 or higher.
CVE-2007-6240
Jetty < 6.1.6 Multiple Vulnerabilities
PVS ID: 4307 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Jetty (version: '%L'), a Java web server that can be downloaded off the Internet
and is currently bundled with some IBM applications. This version of Jetty is vulnerable to
a remote flaw in the way that it handles cookie quotes. An attacker exploiting this flaw
would be able to hijack the session of valid users without authentication. Further, this
version of Jetty is vulnerable to a flaw in the way that it handles Carriage-Return/Line-Feed
characters. An attacker can exploit this flaw to inject malicious HTTP headers into a
session. This version of Jetty is also vulnerable to a cross-site scripting (XSS) attack that
would allow an attacker to possibly retrieve sensitive data from client browsers.
Solution: Upgrade to version 6.1.6 or higher.
CVE-2007-5614
OpenOffice HSQLDB Document Handling Java Code Injection
PVS ID: 4308 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a script injection attack.\n\nThe remote host
is running a version of OpenOffice.org that is affected by a remote code execution flaw.
The root of the flaw appears to be the HSQLDB database engine. An attacker exploiting
this flaw would need to be able to convince a user to open a file that was handled by the
OpenOffice HSQLDB database engine. Successful exploitation would result in the attacker
executing arbitrary Java code on the remote system.
Solution: Upgrade to version 2.3.1 (2.3 build 9238) or higher.
CVE-2007-4575
Passive Vulnerability Scanner (PVS) Signatures
MySQL < 5.0.51 RENAME TABLE Symlink System Table Overwrite
PVS ID: 4309 FAMILY: Database RISK: LOW NESSUS ID:29251
Family Internet Services 1121