(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is running an application that is vulnerable to multiple
flaws.\n\nThe remote host is running ZoneAlarm, a personal firewall for the Windows
platform. The client is running a version of ZoneAlarm that is less than 5.5.062.011. This
version of Zonealarm is prone to at least one vulnerability that could, if exploited, damage
the integrity of the firewall.
Solution: Upgrade to version 5.5.062.011 or higher.
ZoneAlarm Detection
CVE-2005-0114
PVS ID: 2722 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running ZoneAlarm, a personal firewall for the Windows platform.
Solution: Ensure that you are running the latest version of Zonealarm and that Zonealarm is
supported with respect to corporate policies and guidelines.
CVE Not available
RunCMS highlight.php Information Disclosure
PVS ID: 2723 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running RunCMS, a web-based messaging system. This
version of RunCMS is vulnerable to a remote information disclosure flaw. Specifically, a
malformed query to the highlight.php script can result in RunCMS sending back
confidential database information. This information could include user IDs and passwords.
An attacker exploiting this flaw would need to have knowledge regarding the installation
path of the RunCMS program. A successful exploit would result in the loss of confidential
data.
Solution: No solution is known at this time.
CVE-2005-0828
Icecast Multiple Vulnerabilities
PVS ID: 2724 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a vulnerable version of Icecast, an open-source streaming server. This version is
reported prone to at least two (2) remote attacks. The first attack involves a content-parsing
flaw within the XSL parser. An attacker exploiting this flaw would need to be able to
convince an administrator into downloading and installing a malicious XSL file. The
second attack allows a remote attacker to download source code by appending a '.' to a
request to a XSL resource. An attacker exploiting this second flaw would only need to be
able to send queries to the Icecast server. Successful exploitation would result in the
Family Internet Services 700