(PVS) Signatures - Tenable Network Security

PVS ID: 5086 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is running a PHP application that is vulnerable to an
authentication bypass attack.\n\nThe remote host is running BASE, a web-based tool for
analyzing alerts from one or more SNORT sensors. The version of BASE installed on the
remote host is earlier than 1.2.5. Such versions are reportedly fail to sufficiently validate
'user', 'role', or passwords against the database in the 'readRoleCookie()' function of the
'includes/base_auth.inc/php' script. An attacker could exploit this in order to bypass
authentication and gain unauthorized access to the application. For your information, the
reported version of BASE is: \n %L
Solution: Upgrade to BASE version 1.2.5
CVE Not available
Samba < 3.3.6/3.2.13/3.0.35 Multiple Vulnerabilities
PVS ID: 5087 FAMILY: Samba RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote Samba server may be affected by an unauthorized access
vulnerability.\n\nAccording to its banner, the version of the Samba server on the remote
host has a security bypass vulnerability. Access restrictions can be bypassed due to a read
of uninitialized data in smbd. This could allow a user to modify an access control list
(ACL), even when they should be denied permission.\n\nNote the 'dos filemode' parameter
must be set to 'yes' in smb.conf in order for an attack to be successful (the default setting is
'no'). For your information, the reported version of SAMBA is: \n %L
Solution: Upgrade to Samba 3.3.6 / 3.2.13 / 3.0.35 or later, or apply the appropriate patch referenced
in the project's advisory.
CVE-2009-1886
Movable Type < 4.26 Multiple Vulnerabilities
PVS ID: 5088 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Movable Type, a blogging software for Unix and Windows platforms. The
installed version is earlier than 4.26. Such versions are reportedly affected by multiple
vulnerabilities : \n\n - An unspecified cross-site scripting vulnerability.\n\n - A
security-bypass issue in the 'mt-wizard.cgi' script.\n\nFor your information, the reported
version of Movable Type is : \n %L
Solution: Upgrade to Movable Type 4.26 or later.
CVE-2009-2481
MyBB < 1.4.8 Multiple XSS
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1349