(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a HTTP 'splitting' attack.\n\nThe remote
host is running WordPress BLOG. WordPress BLOG is a PHP software package that is
used to generate HTML BLOGS via a web interface. This version is vulnerable to an
HTTP-splitting attack where an attacker can insert CRLF characters and then entice an
unsuspecting user into accessing the URL. The client will parse and possibly act on the
secondary header that was supplied by the attacker.
Solution: Upgrade to version 1.2.1 or higher.
CVE-2004-1584
Helix RealServer Remote Integer Handling DoS
PVS ID: 2357 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS)
attack.\n\nRealServer versions 9.0.4.958 and prior as well as 10.3.1.716 and prior are
vulnerable to a remote Denial of Service (DoS) attack when they are presented with an
invalid (negative) integer for the Content-Length field. An attacker exploiting this flaw
would need to be able to connect to the RealServer (default port 554) and issue a
malformed request. A successful attack would consume large amounts of memory on the
RealServer, eventually ending in the unavailability of the server.
Solution: Upgrade to version 9.0.4.960, 10.3.1.718 or higher.
CVE-2004-0774
Microsoft SMTP DNS Lookup Overflow (885881)
PVS ID: 2358 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:15464
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of Microsoft SMTP server that is vulnerable to a buffer overflow
issue.\n\nAn attacker may exploit this flaw to execute arbitrary commands on the remote
host with the privileges of the SMTP server process.
Solution: http://www.microsoft.com/technet/security/bulletin/MS04-035.mspx
CVE-2004-0840
Passive Vulnerability Scanner (PVS) Signatures
Microsoft NNTP Component Remote Overflow (883935)
PVS ID: 2359 FAMILY: Generic RISK: HIGH NESSUS ID:15465
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of Microsoft NNTP server that is vulnerable to a buffer overflow
issue.\n\nAn attacker may exploit this flaw to execute arbitrary commands on the remote
host with the privileges of the NNTP server process.
Family Internet Services 595