(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote server is a WebSphere application server. The reported version number is
'%L'.\nThis version is reported to be vulnerable to a flaw in the
serveServletsByClassnameEnabled module. While the details of this flaw are currently
unknown, the vendor has released a fix.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2008-0389
Coppermine Photo Gallery < 1.4.11 Album Password Cookie SQL Injection
PVS ID: 4351 FAMILY: CGI RISK: HIGH NESSUS ID:31137
Description: Synopsis : \n\nThe remote web server contains a PHP application that is prone to a SQL
injection attack.\n\nThe version of Coppermine installed on the remote host fails to sanitize
user-supplied input to the album password cookie before using it in a database query in the
'get_private_album_set' function in 'include/functions.inc.php'. Regardless of PHP's
'magic_quotes_gpc' setting, an attacker may be able to exploit this issue to manipulate
database queries, leading to disclosure of sensitive information, execution of arbitrary code
or attacks against the underlying database.
Solution: Upgrade to version 1.4.11 or higher.
CVE-2007-1107
Citadel < 7.11 makeuserkey Function RCPT TO Command Remote Overflow
PVS ID: 4352 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Citadel, a messaging software for Unix systems. There is a buffer overflow
vulnerability in the remote version of this software that may be exploited by an attacker to
execute arbitrary commands on the remote host. The flaw stems from a flaw when handling
user-supplied 'RCPT TO' data. The application cannot handle 'RCPT TO' strings that are
greater than 4096 bytes.
Solution: Upgrade to version 7.11 or higher.
CVE-2008-0394
Passive Vulnerability Scanner (PVS) Signatures
MyBB < 1.2.12 private.php options[disablesmilies] Parameter SQL Injection
PVS ID: 4353 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe version of
MyBB installed on the remote host fails to sanitize input to the 'options[disablesmilies]'
parameter of the 'private.php' script before using it in a SQL query. An attacker exploiting
this flaw would need to be able to authenticate with a valid user ID and send data to the
private.php script. Successful exploitation would result in the attacker executing arbitrary
SQL commands on the database server utilized by MyBB.
Family Internet Services 1134