(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host is vulnerable to an HTML Injection attack\n\nThe version
of CommuniGate Pro running on the remote host is prone to an HTML injection flaw. The
root cause of this flaw is a failure within the CommuniGate software when processing a
specially formatted URI. An attacker, exploiting this flaw, would need to be able to entice a
user into opening an email. Upon opening the email, the attacker would be able to execute
arbitrary script code.\n\nFor your information, the reported version of CommuniGatePro is:
\n %L \n
Solution: Upgrade to CommuniGate Pro 5.2.15 or newer.
CVE Not available
Snitz Forum < 3.4.0.08 SQL Injection
PVS ID: 5105 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack\n\nThe remote host
seems to be running Snitz Forum, a web forum application implemented in ASP. This
version of Snitz ('%L') is reported vulnerable to a SQL injection flaw within the 'email'
parameter of the 'register.asp' script. An attacker, exploiting this flaw, would send specially
formed HTTP queries to the register.asp script. These queries would include SQL
statements which would ultimately be executed on the database utilized by Snitz.
Solution: Upgrade to Snitz Forum 3.4.0.08 or higher
CVE-2003-0286
WordPress < 2.8.2 Multiple Vulnerabilities
PVS ID: 5106 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a cross-site scripting (XSS) attack\n\nThe
remote host is running a version of WordPress earlier than 2.8.2. Such versions are
reportedly affected by a cross-site scripting vulnerability. In particular, the 'uri' parameter
of the 'wp-comments-post.php' script is not sufficiently sanitized. An attacker, exploiting
this flaw, would be able to inject script code which would be executed within the browser.
In order to exploit this flaw, the attacker would need to be able to entice an unsuspecting
user into opening a specially formatted URI. For your information, the reported version of
WordPress is: \n %L \n
Solution: Upgrade to WordPress 2.8.1/WordPress MU 2.8.2 or later.
CVE Not available
ISC BIND Dynamic Update Message Handling Remote DoS
PVS ID: 5107 FAMILY: DNS Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:40422
Family Internet Services 1355