(PVS) Signatures - Tenable Network Security

Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-2137
Winamp < 5.05 .WSZ File Handling Remote Code Execution
PVS ID: 2151 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote client is
running a version of the Nullsoft Winamp media player that may be vulnerable to a remote
code execution issue. This vulnerability may be used to remotely execute arbitrary code on
the host by crafting a malicious .WSZ file (Winamp Skin).
Solution: Upgrade to Winamp 5.05 or higher.
CVE Not available
ignitionServer < 0.3.2 SERVER Command Remote DoS
PVS ID: 2152 FAMILY: IRC Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running an ignitionServer IRC server. This version of ignitionServer is
reported to be prone to a remote denial of service in the processing of the SERVER IRC
command. An attacker may crash or hang the remote server, denying service to legitimate
users.
Solution: Upgrade to version 0.3.2 or higher.
CVE Not available
Unreal IRCD < 3.2.1 Cloak IP Address Disclosure
PVS ID: 2153 FAMILY: IRC Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running a version of Unreal IRCD that is prone to a cloaked
IP address disclosure issue. An attacker may use its own IP and the corresponding hash in
order to find the server cloak keys. This vulnerability could permit an attacker to gather
valid IP addresses in order to carry out attacks on them.
Solution: Upgrade to version 3.2.1 or higher.
CVE-2004-0679
Passive Vulnerability Scanner (PVS) Signatures
Unreal IRCD OperServ Raw Message Channel Join DoS
PVS ID: 2154 FAMILY: IRC Servers NESSUS ID:Not Available
Family Internet Services 537