(PVS) Signatures - Tenable Network Security

Golden FTP Server < 1.93 USER Remote Overflow
PVS ID: 2667 FAMILY: FTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the Golden FTP Server. This version of Golden FTP is vulnerable to a remote
buffer overflow when given a long USER name. An attacker exploiting this flaw would be
able to execute arbitrary commands as the SYSTEM user.\nThe remote version of Golden
FTP Server is %L
Solution: Upgrade to version 1.93 or higher.
CVE-2005-0634
Typo3 < 1.4.2 cmw_linklist SQL Injection
PVS ID: 2668 FAMILY: CGI RISK: HIGH NESSUS ID:17272
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running Typo3, a web-based content management system.
This version of Typo3 is vulnerable to a remote SQL injection attack. An attacker
exploiting this flaw would send a specially crafted HTTP query to the Typo3 application.
Successful exploitation would result in leaking of confidential data, modification of data,
and potentially executing arbitrary commands with the full rights of the web server process.
Solution: Upgrade to version 1.4.2 or higher.
CVE-2005-0658
Squid < 2.5.STABLE10 Set-Cookie Authentication Information Disclosure
PVS ID: 2669 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may facilitate the theft of authentication data.\n\nThe remote
Squid caching proxy, according to its version number,\nis vulnerable to an attack where the
attacker gains access to Set-Cookie headers for another user. Such an attack would allow
the attacker to gain access to resources with the credentials of another user.
Solution: Upgrade to squid 2.5.STABLE10 or higher.
CVE-2005-1519
CProxy Directory Traversal Arbitrary File Access / DoS
PVS ID: 2670 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running CProxy, a Web/Mail proxy server. This version of CProxy is vulnerable to a
flaw where a remote attacker can download any file from the server (even outside the
webroot) by using a '../' type of query. In addition, if the requested file is a .exe which does
Family Internet Services 683