(PVS) Signatures - Tenable Network Security

CVE-2004-2225
BugPort < 1.134 Remote Privilege Escalation
PVS ID: 2346 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML injection attack.\n\nThe remote
host is running a version of BugPort. BugPort is a PHP application that is used to track
bugs and development items within an organization. According to its version number, this
instance is vulnerable to a remote attack where a remote user can upload a malicious script
or file in order to escalate privileges.
Solution: Upgrade to at least version 1.134 or higher.
CVE Not available
Vypress < 4.0 First Message Field Overflow
PVS ID: 2347 FAMILY: Peer-To-Peer File Sharing RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of Vypress Messenger, %L , that is vulnerable to a remote buffer
overflow. An attacker exploiting this flaw would only need to be able to send a message or
file to the Vypress service (listens on port 7777 by default). A successful exploit would
allow the remote attacker the ability to overwrite and control the program's memory.
Solution: Upgrade to version 4.0 or higher.
CVE-2004-1574
NetworkActive Web Server Resource Exhaustion DoS
PVS ID: 2348 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running NetworkActive Web Server. NetworkActive Web Server is a small
application that can be downloaded and run on any Windows desktop. An attacker
exploiting this flaw would need to be able to connect to the server (typically on port 80)
and send long requests. By sending enough requests, the attacker would be able to exhaust
the resources of the Web server and cause it to crash.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
IBM DB2 < 8.2 Multiple Vulnerabilities (2)
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2349 FAMILY: Database RISK: HIGH NESSUS ID:15486
Family Internet Services 592