(PVS) Signatures - Tenable Network Security

CVE-2004-1558
Intellipeer User Account Enumeration
PVS ID: 2332 FAMILY: POP Server
RISK:
MEDIUM
NESSUS ID:14829
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running a POP3 service that allows a remote attacker to
determine when a user account is valid. An attacker exploiting this flaw would only need to
connect to the port repeatedly while sending different user names. The server will alert the
attacker whenever a valid username is sent. This vulnerability is known to affect Intellipeer
POP3 server (versions less than or equal to 1.0.1).
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-2150
@lex Guestbook livre_include.php Remote File Inclusion
PVS ID: 2333 FAMILY: Web Servers RISK: HIGH NESSUS ID:14830
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running the @lex guestbook. @lex is a web-based guestbook. Some versions of @lex are
prone to a remote exploitation via PHP script upload.
Solution: No solution is known at this time.
CVE-2004-1554
MySQL < 4.1.5 Bounded Parameter Overflow
PVS ID: 2334 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:14831
Description: Synopsis :\n\nThe remote host is vulnerable to an flaw that allows attackers to execute
arbitrary commands.\n\nYou are running a version of MySQL 4.1.x which is older than
version 4.1.5. There is a flaw in the remote version of this software that may allow an
attacker to execute arbitrary commands on the remote host with the privileges of the user
running the mysqld process (typically 'mysql').
Solution: Upgrade to at least version 4.1.5 or higher.
CVE-2004-2149
Passive Vulnerability Scanner (PVS) Signatures
Icecast < 2.0.2 Multiple HTTP Headers Remote Overflow
PVS ID: 2335 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Family Internet Services 588