(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote database server is affected by multiple issues.\n\nThe
installation of DB2 9.5 on the remote host does not have any Fix Packs applied and thus is
affected by one or more of the following issues : \n\n - There is a security vulnerability in
the 'NNSTAT' procedure on Windows platforms only that allows low-privileged users to
overwrite arbitrary files (IZ10776).\n - There is a security vulnerability in the
'SYSPROC.ADMIN_SP_C' procedure on Windows platforms that allows users to load
arbitrary libraries and execute arbitrary code in the system (IZ10917).\n - An unspecified
vulnerability affects 'DB2WATCH' and 'DB2FREEZE' on Solaris platforms (IZ12994).\n -
An authenticated remote user can cause the DB2 instance to crash by passing specially
crafted parameters to the 'RECOVERJAR' and 'REMOVE_JAR' procedures (IZ15496).\n -
There is an internal buffer overflow vulnerability in the DAS process that could allow
arbitrary code execution on the affected host (IZ12406).\n - A local attacker can create
arbitrary files as root on Unix and Linux platforms using symlinks to the
'dasRecoveryIndex', 'dasRecoveryIndex.tmp', '.dasRecoveryIndex.lock', and
'dasRecoveryIndex.cor' files during initialization (IZ12798).\n - There is a security
vulnerability related to a failure to switch the owner of the 'db2fmp' process affecting Unix
and Linux platforms (IZ19155).\n - When a memory dump occurs, the password used to
connect to the database remains visible in clear text in memory (JR28314). The reported
version/build of the remote DB2 server is: \n %L
Solution: Apply DB2 Version 9.5 Fix Pack 1.
CVE-2008-1998
Coppermine Photo Gallery < 1.4.19 data Cookie Local File Inclusion
PVS ID: 4613 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:33789
Description: Synopsis :\n\nThe remote web server contains a PHP application that is affected by a local
file inclusion vulnerability.\n\nThe version of Coppermine installed on the remote host fails
to sanitize input to the 'lang' array element of its data cookie before using it in
'include/init.inc.php' to include PHP code. Provided the application's character set is set to
'utf-8', which is default, an unauthenticated remote attacker can exploit this issue to view
arbitrary files or possibly to execute arbitrary PHP code on the remote host subject to the
privileges of the web server user ID.
Solution: Upgrade to version 1.4.19 or higher.
CVE-2008-3486
Apache Tomcat < 4.1.37/5.5.26/6.0.16 Multiple Vulnerabilities
PVS ID: 4614 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Apache Tomcat version: \n %L \n\nThis version of Tomcat is reported to be
vulnerable to several flaws. First, the application fails to sanitize user input to the
'RequestDispatcher' method. An attacker exploiting this flaw could request content outside
Family Internet Services 1208