(PVS) Signatures - Tenable Network Security

Solution: No solution is known at this time.
CVE-2005-0700
Oracle Database Server UTL_FILE Directory Traversal File Access
PVS ID: 2680 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:17654
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files.\n\nThe remote host appears to be running a vulnerable version of Oracle
Database Server. An authenticated user can craft SQL queries such that they would be able
to retrieve any file on the system. An attacker exploiting this flaw would need a valid
account and would need to be able to connect to the Oracle service (typically on port 2972).
The attacker would retrieve and/or potentially modify confidential data on the target Oracle
server.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-0701
Yahoo! Messenger < 6.0.0.1921 Multiple DoS
PVS ID: 2681 FAMILY: Internet Messengers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running a version of Yahoo Instant Messenger that is reported vulnerable to
a remote buffer overflow. An attacker exploiting this flaw would craft a malicious 'away'
message and then entice an unsuspecting user to attempt to contact them. When the user
receives the malicious 'away' message, the overflow would be triggered and code would be
executed remotely. In addition, this version of Yahoo! Messenger is vulnerable to a remote
Denial of Service (DoS) attack via a malformed YMSGR: URI.
Solution: Upgrade to version 6.0.0.1921 or higher.
CVE-2005-1618
PHP-Fusion < 5.01 BBcode IMG Tag XSS
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2682 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML injection attack.\n\nThe remote
host is running a version of PHP-Fusion which is vulnerable to a script injection flaw. The
'fusion_core.php' script is reportedly vulnerable to an attack where an attacker can inject
HTML and script code through the 'BBCode IMG' tag. An attacker exploiting this flaw
would create a malicious URI link and then convince an unsuspecting user to click on the
link. A successful attack would yield potentially confidential data (cookies, credentials) as
well as potentially execute malicious code within the context of the vulnerable server.
Family Internet Services 687