(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
remote host is running a version of 04WebServer that is older or as old as version
1.42.\nThe remote version of this software is vulnerable to cross-site scripting and log
injection vulnerabilities.
Solution: No solution is known at this time.
CVE-2004-1513
SquirrelMail < 1.4.4 decodeHeader HTML Injection
PVS ID: 2401 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host allows attackers to bypass user authentication.\n\nThe
remote host is running SquirrelMail, a webmail system written in PHP. Versions of
SquirrelMail prior to 1.4.4 are vulnerable to an email HTML injection vulnerability. A
remote attacker can exploit this flaw to gain access to users' accounts.
Solution: Upgrade to SquirrelMail 1.4.4 or higher.
CVE Not available
Firefox < 1.0.0 IMG Tag Multiple Vulnerabilities
PVS ID: 2402 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:15712
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is using Firefox. The remote version of this software contains a security issue
that may allow an attacker to determine existence of local files, cause a DoS and steal
passwords (Windows only). The security vulnerability is due to the fact that Firefox does
not handle correctly tags.
Solution: Upgrade to Firefox 1.0.0 or higher.
CVE-2005-0150
BNC < 2.9.1 getnickuserhost IRC Server Response Buffer Overflow
PVS ID: 2403 FAMILY: IRC Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of BNC, an IRC proxy that is vulnerable to a remote buffer overflow. An
attacker may use this issue to execute code on remote server.
Solution: Upgrade to version 2.9.1 or higher.
CVE-2004-1052
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 608