(PVS) Signatures - Tenable Network Security

Solution: Upgrade to PHP 5.0.3 or 4.3.10 or higher.
CVE-2004-1065
IBM WebSphere Commerce Database Update Default User Information Disclosure
PVS ID: 2461 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote WebSphere webserver is vulnerable to an
information leak. User information is sometimes stored under the profile of the
'default' user. Unintended users may gain access to this information and use the
information to elevate privileges on the remote machine. It is also possible that the
default user account may disclose information regarding other users.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
Ikonboard < 3.1.3 ikonboard.cgi Multiple Parameter SQL Injection
PVS ID: 2462 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host appears to be running Ikonboard, a bulletin board service
implemented in Perl. This version is reported vulnerable to a SQL injection vulnerability.
An attacker may gain access to unauthorized information or may steal authentication
credentials by sending malformed string to ikonboard.cgi.
Solution: Upgrade to Ikonboard 3.1.3 or higher.
CVE-2004-1406
Samba < 3.0.10 Directory Access Control List Remote Integer Overflow
PVS ID: 2463 FAMILY: Samba
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a remote overflow.\n\nThe remote Samba
server, according to its version number ('%L'), may be vulnerable to a remote buffer
overflow.\nThe remote integer overflow vulnerability may allow an attacker to execute
code on the server.\n An attacker needs access to a vulnerable share to exploit this issue.
Solution: Upgrade to Samba 3.0.10 or higher.
CVE-2004-1154
JSBoard Remote Arbitrary Script Upload
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2464 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Family Internet Services 625