(PVS) Signatures - Tenable Network Security

PVS ID: 2693 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:17315
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Active WebCam, a Java program that displays real-time video camera images
over the Internet. This version of Active WebCam is vulnerable to several flaws.
Specifically, it is reported that Active WebCam reveals path information and file name
location (within debugging information). It is also reported that requesting a URI like
'http://www.somesite.com/A:\a.txt' leads to a Denial of Service (DoS) condition on the
remote application.
Solution: Upgrade to version 5.6 or higher.
CVE-2005-0734
PhotoPost Multiple Vulnerabilities
PVS ID: 2694 FAMILY: CGI RISK: HIGH NESSUS ID:17314
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML injection attack.\n\nThe remote
host is running PhotoPost, a web-based image gallery written in PHP. This version of
PhotoPost is reported to be vulnerable to multiple flaws. Specifically, the host is reported
vulnerable to an access validation flaw within the 'adm-photo.php' script. An attacker
exploiting this flaw would be able to upload images under the context of another user. The
second flaw is a Cross-Site Scripting (XSS) vulnerability. Exploiting the XSS flaw may
enable an attacker to inject arbitrary script code into the browser of unsuspecting users. A
successful attack would potentially allow the attacker the ability to view confidential data
(cookies, authentication data, and more) or compromise the integrity of the local system via
the web browser.
Solution: Upgrade to a version of PhotoPost greater than 5.00 Release Candidate 3.
CVE-2005-1629
Ipswitch IMail < 8.15 Hotfix 1 IMAP EXAMINE Argument Buffer Overflow
PVS ID: 2695 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:17311
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of the Ipswitch Collaboration\nSuite / Ipswitch IMail IMAP server that is
prone to a buffer overflow\nwhen processing an EXAMINE command with a long
argument.\nSpecifically, if an authenticated attacker sends an EXAMINE command\nwith
a malformed mailbox name of 259 bytes, the attacker will overwrite the\nsaved stack frame
pointer and potentially gain control of process\nexecution.
Solution: Apply IMail Server 8.15 Hotfix 1 (February 3, 2005) or upgrade to a version greater
than 8.15 when it becomes available.
CVE-2005-0707
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 691