(PVS) Signatures - Tenable Network Security

PHPGroupWare Multiple XSS and SQL Injection Vulnerabilities
PVS ID: 2457 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host seems to be running PHPGroupWare, a groupware system
implemented in PHP. This version is reported to be vulnerable to a cross-site scripting issue
and a SQL injection vulnerability. An attacker may gain access to unauthorized information
or may steal cookie-based authentication credentials from a legitimate user by sending the
user a malformed link to this web site.
Solution: No solution is known at this time.
CVE-2004-1383
MPlayer < 1.0pre5try2 Get_Header Remote Client-Side Buffer Overflow
PVS ID: 2458 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using a version of Mplayer, a multimedia video and audio application, that contains bugs
that may allow a malicious server to overwrite a buffer and execute code.
Solution: Upgrade to Mplayer 1.0pre5try2 or higher.
CVE Not available
Xine-Lib < 1.0-rc8 Remote Client-Side Buffer Overflow
PVS ID: 2459 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using Xine, an open-source multimedia player. It is reported that versions up to 1.0 rc7 are
vulnerable to a buffer overflow. An attacker may craft a malicious multimedia file that may
execute arbitrary code on the remote host if played with Xine.
Solution: Upgrade to Xine 1.0-rc8 or higher.
CVE Not available
PHP < 4.3.10 / 5.0.3 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2460 FAMILY: Web Servers RISK: HIGH NESSUS ID:15973
Description: Synopsis : \n\nThe remote host is vulnerable to a script injection attack.\n\nThe remote host
is running a version of PHP which is older than 5.0.3 or 4.3.10.\nThe remote version of this
software is vulnerable to various security issues that may, under certain circumstances,
allow attackers to execute arbitrary code on the remote host, provided that they can pass
arbitrary data to some functions or bypass safe_mode. The reported version of PHP is: \n
%L
Family Internet Services 624