(PVS) Signatures - Tenable Network Security

Solution: N/A
CVE Not available
Winamp < 5.58 Multiple Vulnerabilities
PVS ID: 5597 FAMILY: Generic RISK: HIGH NESSUS ID:47717
Description: Synopsis :\n\nThe remote host has a media player installed that is vulnerable to multiple
attack vectors.\n\nThe remote host is running Winamp, a media player for Windows. For
your information, the observed version of Winamp is %L.\n\nVersions of Winamp earlier
than 5.58 are potentially affected by multiple vulnerabilities :\n\n - A stack-based buffer
overflow when loading a malformed whatsnew.txt file.\n\n - A stack-based buffer overflow
when parsing VP6 video content.\n\nAn attacker, exploiting these flaws, can execute
arbitrary code in the context of the affected application.
Solution: Upgrade to Winamp version 5.58 or later.
CVE Not available
CMS Made Simple < 1.8.1 Local File Include Vulnerability
PVS ID: 5598 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server is running a PHP application that is affected by a
local file include vulnerability.\n\nThe remote host is running CMS Made Simple, a
web-based content-management application written in PHP. For your information, the
observed version of CMS Made Simple is %L.\n\nVersions of CMS Made Simple earlier
than 1.8.1 are potentially affected by a local file include vulnerability because the
application fails to properly sanitize user supplied input to the 'default_lang' parameter of
the 'translation.functions.php' script. A remote, authenticated attacker, exploiting this flaw
could execute arbitrary code subject to the privileges of the user running the affected web
server.
Solution: Upgrade to CMS Made Simple 1.8.1 or later.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
IBM Solid Database < 6.5 Service Pack 2 Handshake Request Username Field Remote Code
Execution
PVS ID: 5599 FAMILY: Database RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote database server is vulnerable to a remote code execution
attack.\n\nThe remote host is running IBM SolidDB. For your information, the observed
version of SolidDB is :%L.\n\nVersions of SolidDB earlier than 6.5.0.2 are potentially
affected by a remote code execution vulnerability because the application fails to properly
validate the length of the username field. An attacker, exploiting this flaw, could execute
arbitrary code subject to the privileges of the user running the affected application.
Family Internet Services 1503