(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 6.9 Build 355 or higher.
CVE-2008-6828
CMS Made Simple admin/login.php cms_language Cookie Local File Inclusion
PVS ID: 4773 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:34992
Description: Synopsis : \n\nThe remote web server contains a PHP application that is susceptible to a
local file inclusion attack.\n\nThe remote host is running CMS Made Simple, a content
management system written in PHP. The version of CMS Made Simple installed on the
remote host fails to sanitize user-supplied input to the 'cms_language' cookie when passed
to the 'admin/login.php' script before using it to include PHP code. Regardless of PHP's
'register_globals' and 'magic_quotes_gpc' settings, an unauthenticated attacker may be able
to leverage this issue to view arbitrary files or possibly to execute arbitrary PHP code on
the remote host, subject to the privileges of the web server user ID. The reported version of
CMS Made Simple is: \n %L
Solution: No solution is known at this time.
CVE-2008-5642
Samba 3.0.29 - 3.2.4 Potential Memory Disclosure
PVS ID: 4774 FAMILY: Samba
RISK:
MEDIUM
NESSUS ID:34993
Description: Synopsis : \n\nThe remote Samba server may be affected by an information disclosure
vulnerability.\n\nAccording to its banner, the version of the Samba server on the remote
host is between 3.0.29 and 3.2.4 inclusive. Such versions reportedly can potentially leak
arbitrary memory contents of the 'smbd' process due to a missing bounds check on
client-generated offsets of secondary 'trans', 'trans2', and 'nttrans' requests. The reported
version is: \n %L
Solution: Upgrade to version 3.2.5 / 3.0.33 or higher or apply the appropriate patch referenced in the
project's advisory.
CVE-2008-4314
WordPress wp-includes/feed.php self_link() Function Host Header RSS Feed XSS
PVS ID: 4775 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:34994
Description: Synopsis : \n\nThe remote web server contains a PHP application that is affected by a
cross-site scripting vulnerability.\n\nThe version of WordPress installed on the remote host
fails to completely sanitize input to the the 'Host' request header before using it in the
'self_link()' function in 'wp-includes/feed.php' to generate dynamic HTML output. An
attacker may be able to leverage this to inject arbitrary HTML and script code into a user's
browser to be executed within the security context of the affected site. The reported version
Family Internet Services 1257