(PVS) Signatures - Tenable Network Security

initiate an SFTP connection to a malicious SSH server. Successful exploitation would result
in PuTTY crashing or possibly executing arbitrary commands. The version of PuTTY
installed on the remote host is: %L
Solution: Upgrade to PuTTY 0.57 or higher.
CVE-2005-0467
Mambo Content Server Detection Global Variables Overwrite
PVS ID: 2638 FAMILY: Web Servers RISK: HIGH NESSUS ID:18495
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running the Mambo Content Server, an application for generating dynamic content for
web servers. The remote application is vulnerable to a flaw where remote attackers can
upload malicious code. The code can then be executed by simply requesting the code via an
HTTP session. The specific flaw is within the Tar.php script, which does not properly
sanitize user-supplied content. Versions of Mambo through 4.5.2.3 are prone to a remote
'file include' flaw. An attacker exploiting this flaw would be able to specify malicious code
that would be run by the Mambo server.
Solution: Upgrade to a version of Mambo higher than 4.5.2.
CVE-2005-3738
WebConnect Multiple Remote Vulnerabilities
PVS ID: 2639 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running OpenConnect WebConnect. WebConnect is a web-based graphical user interface
that gives remote users console access to mainframe, midrange, and Unix systems.
WebConnect can be used to launch a Java-based telnet console that communicates over the
HTTP protocol. This version of WebConnect is vulnerable to several remote attacks. The
impact of the attack ranges from Denial of Service (DoS) to data compromise. An attacker
exploiting these flaws would only need to be able to send HTTP requests to the web server.
Successful exploitation would result in compromise of data or loss of availability.\nThe
remote host is running WebConnect version %L
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-0465
Curl < 7.13.1 NTLM Stack-based Buffer Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2640 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using a version of curl (or libcurl) that is vulnerable to several remote buffer overflows. To
exploit this vulnerability, an attacker would have to set up a rogue web server that would
reply with a malicious NTLM or Kerberos authentication request. Upon successful
Family Internet Services 674