(PVS) Signatures - Tenable Network Security

CVE-2004-0493
Vortex Portal Content Management System Multiple Remote File Inclusion
PVS ID: 2745 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a script injection attack.\n\nThe remote host
is running %L , a content-management system for gaming. This version of Vortex is
vulnerable to an 'include' file injection attack. Specifically, the 'act' variable of 'content.php'
and 'index.php' is not properly sanitized by the Vortex application. An attacker exploiting
this flaw would be able to include arbitrary malicious code within a URI. The attacker
would then need to be able to convince a client to browse to the URI. A successful attack
would result in the client browser executing malicious code within the context of the
Vortex application.
Solution: Ensure that this application is allowed within corporate policies and guidelines.
CVE-2005-0879
WU-FTPD FTP Server File Globbing Remote DoS
PVS ID: 2746 FAMILY: FTP Servers RISK: HIGH NESSUS ID:17602
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running a WU-FTPD FTP server. This version of WU-FTPD is vulnerable to
a remote Denial of Service (DoS). Specifically, by sending a LIST request with many '*'
characters causes the remote server to crash. This introduces a risk to availability.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-0256
XMB Forum < 1.9.8 SQL Injection and XSS Vulnerabilities
PVS ID: 2747 FAMILY: CGI RISK: HIGH NESSUS ID:17608
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running XMB Forum. There is flaw in the version this host is using that may allow an
attacker to perform a cross-site scripting attack against this host. An attacker exploiting this
flaw would need to be able to convince a user to browse a malicious URI. Successful
exploitation would result in a potential loss of confidential data (cookies, authentication
credentials, and more.).\n\nIn addition, there is a flaw in the way that XMB handles
user-supplied data sent to the 'u2u.inc.php' script. An attacker sending malformed queries
can inject SQL commands that are executed on the database server. This can lead to the
reading or writing of data and, in some cases, the attacker can execute arbitrary system
commands.
Solution: Upgrade to version 1.9.8 or higher.
CVE-2005-0885
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 707