(PVS) Signatures - Tenable Network Security

Alt-N WebAdmin < 3.0.3 Multiple Remote Vulnerabilities
PVS ID: 2572 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:16271
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Alt-N WebAdmin, a web interface to the MDaemon mail server. The remote
version of this software is vulnerable to a cross-site scripting vulnerability due to a lack of
filtering on user-supplied input in the file 'useredit_account.wdm' and the file
'modalframe.wdm'. An attacker may exploit this flaw to steal user credentials. This
software is also vulnerable to an access bypass vulnerability in the file
'useredit_account.wdm'. An attacker may exploit this flaw to modify user account
information. An attacker need a valid email account on the server to exploit both
vulnerabilities.
Solution: Upgrade to WebAdmin 3.0.3 or higher.
CVE-2005-0318
IceWarp Web Mail < 5.3.3 Multiple Vulnerabilities (3)
PVS ID: 2573 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:16273
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running IceWarp Web Mail, a webmail solution available for the Microsoft Windows
platform. The remote version of this software is vulnerable to multiple input validation
issues that may allow an attacker to compromise the integrity of the remote host. An
attacker needs a valid account on the webmail to perform an attack.
Solution: Upgrade to IceWarp Web Mail 5.3.3 or higher.
CVE-2005-0321
ngIRCd < 0.8.2 Lists_MakeMask Function Remote Buffer Overflow
PVS ID: 2574 FAMILY: Generic RISK: HIGH NESSUS ID:16274
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of the ngIRCd service that may be vulnerable to a buffer overflow in the
way the server handles list names. An attacker may execute code on the remote host by
using a malicious user information.
Solution: Upgrade to ngIRCd 0.8.2 or higher.
CVE-2005-0199
phpPGAds/phpAdNew < 2.0.2 HTTP Response Splitting
PVS ID: 2575 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:16276
Family Internet Services 656