(PVS) Signatures - Tenable Network Security

PVS ID: 2317 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running Full Revolution aspWebCalendar, a web calendar
application implemented in ASP. It is reported that this version of the software is prone to
multiple SQL injection vulnerabilities. An attacker may access the underlying database in
order to access sensitive information or to corrupt data.
Solution: No solution is known at this time.
CVE-2004-1552
Full Revolution album.asp aspWebAlbum SQL Injection
PVS ID: 2318 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running Full Revolution aspWebAlbum, a web photo album
application implemented in ASP. It is reported that this version of the software is prone to
multiple SQL injection vulnerabilities. An attacker may access the underlying database in
order to access sensitive information or to corrupt data.
Solution: No solution is known at this time.
CVE-2004-1552
Canon ImageRUNNER Printer Email Arbitrary Content Printing / DoS
PVS ID: 2319 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:14819
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host seems to be a Canon ImageRUNNER printer, running an SMTP service. It is
possible to send an email to the remote service and it will print its content. An attacker may
use this flaw to send an endless stream of emails to the remote device and cause a denial of
service by using all the paper in printer.
Solution: Disable the email printing service using the web interface.
CVE-2004-2166
Generic Shell Detectors (Checkpoint Telnet)
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2320 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: A shell server was noted on the host. Typically, shells are used by remote users to manage
operating systems. Shells that pass traffic in plaintext introduce a risk to confidentiality. In
addition, many shells are used by malicious individuals as part of a Trojan program or
remote buffer overflow exploit.
Family Internet Services 584