(PVS) Signatures - Tenable Network Security

punBB < 1.2.2 Multiple SQL Injection and Authentication Bypass Vulnerabilities
PVS ID: 2651 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running punBB, a web-based bulletin board. punBB works in
conjunction with a SQL database. This version of punBB is vulnerable to several SQL
injection flaws as well as an authentication bypass flaw. An attacker exploiting these flaws
would only need to be able to send HTTP traffic to the web server. A successful SQL
injection attack would give the attacker the ability to execute commands on the SQL server,
view data, and modify data. A successful authentication bypass attack would give the
attacker the ability to perform administrative tasks on the web server.
Solution: Upgrade to version 1.2.2 or higher.
CVE-2005-0570
Firefox < 1.0.1 Multiple Vulnerabilities
PVS ID: 2652 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:17603
Description: Synopsis : \n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is using Firefox. The remote version of this software contains the following
security flaws: \n1) There is a flaw in the way that the browser handle scripting within
'tabbed' cross-domains. An attacker exploiting this flaw would need to be able to coerce a
user into clicking on a malicious URL which would then open a separate 'TAB' within the
browser. The attacker could then retrieve data relevant to other tabbed connections or
execute code locally.\n2)There is a flaw in the default about: config script that would allow
an attacker to modify configuration data. In order to execute such an attack, the attacker
would need to be able to entice the user into visiting or clicking on a malicious URL. A
successful attacker would be able to modify the local configuration file, resulting in
enhanced access rights or other potential exploits. The reported browser version (as seen on
the network) is: \n %L
Solution: Upgrade to Firefox 1.0.1 or higher.
CVE-2005-0231
Brooky CubeCart < 2.0.6 settings.inc.php XSS
PVS ID: 2653 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: The remote host is using Brooky CubeCart, an online storefront application written in PHP.
This version of CubeCart is vulnerable to a Cross-Site Scripting (XSS) flaw within the
default parser. An attacker exploiting these flaws would be need to be able to convince a
user to click on a malicious URL. Upon successful exploitation, the attacker would be able
to steal credentials or execute code within the browser.
Solution: Upgrade to version 2.0.6 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 678