(PVS) Signatures - Tenable Network Security

to an information disclosure issue. An attacker may craft encoded URL request that may
permit him to read files and directory outside the Icecast Server directory.
Solution: Upgrade to Icecast 1.3.10 or higher.
CVE-2001-0784
Icecast < 1.3.10 print_client() Format String
PVS ID: 2144 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a remote 'format string' flaw.\n\nThe remote
host is running a vulnerable version of Icecast, an open-source streaming server. It is
reported that every version prior to 1.3.10 is vulnerable to a format string bug that may
permit an attacker to overwrite memory at arbitrary address.
Solution: Upgrade to Icecast 1.3.10 or higher.
CVE-2001-0197
DtMail Local Format String Privilege Escalation
PVS ID: 2145 FAMILY: SMTP Clients RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a remote 'format string' flaw.\n\nThe remote
host is using DtMail, a mail user agent included in CDE, the default desktop environment
for Sun Solaris. It is reported that versions of DtMail shipped with Solaris 8 and 9 are prone
to a local format string issue. An local attacker may exploit this vulnerability to execute
malicious code with mail group privileges.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-0800
WebAPP < 0.9.9.2 index.cgi Directory Traversal Arbitrary File Access
PVS ID: 2146 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:14365
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\n The remote host is running WebAPP, an open-source web portal
application written in perl. There is a flaw in the remote version of this software that may
allow an attacker to read arbitrary files on the remote host with the privileges of the web
server process (httpd or root).
Solution: Upgrade to version 0.9.9.2 or higher.
CVE-2004-1742
Passive Vulnerability Scanner (PVS) Signatures
Easy File Share Virtual Folders Arbitrary File Access
Family Internet Services 535