(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a directory traversal flaw\n\nThe remote
rsync server may be vulnerable to a path traversal issue.\n An attacker may use this flaw to
create arbitrary files hosted outside of a module directory.
Solution: Upgrade to rsync 2.6.1 or later.
CVE-2004-0426
SquirrelMail < 1.4.3 Multiple Vulnerabilities
PVS ID: 1217 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to XSS and SQL injection flaws\n\nThe
remote host is running SquirrelMail : %L . SquirrelMail is a web-based mail server.
There are several flaws in all versions prior to 1.4.3 that allow for remote cross-site
scripting (XSS) attacks and SQL injection attacks.
Solution: Upgrade to SquirrelMail 1.4.3 or later.
CVE-2004-0519
Eudora Long URL Status Bar Obfuscation
PVS ID: 1218 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote email client may be tricked into visiting a malicious
URI\n\nEudora versions 6.0.0 through 6.1.0 are vulnerable to a URI obfuscation weakness
that may hide the true contents of a link. An attacker, exploiting this bug remotely, would
send an HTML email with an obfuscated link which actually redirects to a malicous or
misleading web page.
Solution: Upgrade to the most recent version of Eudora.
CVE-2004-2649
CVS < 1.11.15 / 1.12.7 Client Traversal Arbitrary File Retrieval
PVS ID: 1219 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:12212
Description: Synopsis :\n\nThe remote host is vulnerable to a directory traversal flaw\n\nThe remote
CVS server, according to its version number, might allow an attacker to checkout RCS
archive files that are outside of the cvs root.
Solution: Upgrade to CVS 1.11.15, 1.12.7 or later.
CVE-2004-0405
Passive Vulnerability Scanner (PVS) Signatures
CVS < 1.11.16 / 1.12.8 pserver Line Entry Handling Remote Overflow
Family Internet Services 310