(PVS) Signatures - Tenable Network Security

RaidenHTTPD <
PVS ID: 4319 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a directory traversal flaw.\n\nThe remote
host is running RaidenHTTPD, a web server for Windows. Specifically, the 'ulang'
parameter of the 'raidenhttpd-admin/workspace.php' script fails to adequately parse
user-supplied data. A request containing '../' would allow an attacker to gain access to files
outside the web root.
Solution: Upgrade to a version higher than 2.0.19.
CVE-2007-6453
CUPS < 1.3.5 Back End SNMP Response Remote Overflow
PVS ID: 4320 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the Common Unix Printing System (CUPS) daemon. This version of CUPS is
vulnerable to a remote buffer overflow. The flaw is in the way that CUPS handles SNMP
responses. An attacker sending a malformed SNMP response would be able to execute
arbitrary code on the remote system. In order to exploit this flaw, the attacker would need
for SNMP to be enabled on the CUPS server as well as the ability to intercept and respond
to SNMP messages bound for valid hosts.
Solution: Upgrade to a version 1.3.5 or higher
CVE-2007-5849
ClamAV < 0.92.0 PE File Handling Integer Overflow
PVS ID: 4321 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the ClamAV antivirus client version %L\n\nThis version of ClamAV is vulnerable
to a remote integer overflow due to a content-parsing flaw when handling malformed PE
files. An attacker exploiting this flaw would only need the ability to send a malformed
attachment to a system protected by ClamAV. Successful exploitation would result in the
attacker overwriting critical memory blocks and either crashing the service or executing
arbitrary code.
Solution: Upgrade to version 0.92.0 or higher.
CVE-2007-6596
Passive Vulnerability Scanner (PVS) Signatures
Flash Player < 9.0.115.0 / 7.0.73.0 APSB07-20 Multiple Vulnerabilities
PVS ID: 4322 FAMILY: Web Clients RISK: HIGH NESSUS ID:29741
Family Internet Services 1125