(PVS) Signatures - Tenable Network Security

phpMyDirectory < 10.1.6 review.php Multiple Parameter XSS
PVS ID: 2774 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:17634
Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
version of phpMyDirectory installed on the remote host suffers from multiple cross-site
scripting vulnerabilities due to its failure to sanitize user-input to its 'review.php' script
through various parameters. A remote attacker can exploit these flaws to steal cookie-based
authentication credentials and perform other such attacks.
Solution: Upgrade to a version of phpMyDirectory greater than 10.1.6 when it becomes available.
CVE-2005-0896
AOLServer Multiple Remote Vulnerabilities
PVS ID: 2775 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is running AOLServer, a web server from AOL. This version of AOLServer is
vulnerable to multiple remote overflows. An attacker exploiting these flaws would be able
to execute arbitrary code on the remote server.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2001-0205
Ublog < 1.0.5 login.asp msg Parameter XSS
PVS ID: 2776 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: The remote host is running Ublog, a blog program written in ASP. This version of Ublog is
vulnerable to a remote Cross-Site Scripting (XSS) attack. An attacker exploiting this flaw
would typically need to be able to convince a user to browse a malicious URI. A successful
attack would result in the theft of potentially confidential client data (cookies,
authentication credentials, and more) or malicious code being executed within the client
browser.
Solution: Upgrade to version 1.0.5 or higher.
CVE-2005-0925
Sylpheed MIME Content-parsing Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2777 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote client is
running Sylpheed, an email client for Unix and Unix-like operating systems. This version is
vulnerable to a buffer overflow via specially crafted MIME messages or attachments. An
attacker exploiting this flaw would need to be able to convince a user to open a malicious
Family Internet Services 714