(PVS) Signatures - Tenable Network Security

malicious email. Successful exploitation would result in the client running code within their
browser that would seem to be originating from the Mailreader server.
Solution: Upgrade to version 2.3.36 or higher.
CVE-2005-0386
BayTech RPC3 Telnet Daemon Authentication Bypass
PVS ID: 2781 FAMILY: Generic RISK: HIGH NESSUS ID:17663
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is running a version of Bay Technical Associates RPC3
Telnet Daemon that lets a user bypass authentication by sending a special set of keystrokes
at the username prompt. Since BayTech RPC3 devices provide remote power management,
this vulnerability enables an attacker to cause a denial of service, shut down the device
itself and any connected devices.
Solution: No solution is known at this time.
CVE-2005-0957
PHP Remote getimagesize DoS
PVS ID: 2782 FAMILY: Web Servers RISK: HIGH NESSUS ID:18033
Description: Synopsis : \n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is running a version of PHP that is older than 4.3.11 or 5.0.4. This version
contains a bug that can be triggered when the getimagesize() function processes malicious
IFF or JPEG image files. An attacker exploiting this flaw would be able to present an image
to the function that would cause the function to go into an infinite loop by processing a
negative file size. A successful exploit would result in the loss of system availability for
valid users. There is also a reported flaw in the way that PHP handles data being passed to
the Image File Directory (IFD). Reportedly, this leads to a remote Denial of Service (DoS)
attack. Other flaws impacting this version of PHP have been reported; however, details
have not been released. The reported version of PHP is: \n %L
Solution: Upgrade to 4.3.11, 5.0.4 or higher.
CVE-2005-1043
Passive Vulnerability Scanner (PVS) Signatures
MaxWebPortal < 1.36 XSS and SQL Injection Vulnerabilities
PVS ID: 2783 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nMaxWebPortal is a web portal that utilizes a backend SQL or MySQL database.
This version of MaxWebPortal is vulnerable to remote cross-site scripting (XSS) and SQL
injection flaws. An attacker exploiting this flaw would typically need to be able to convince
a user to browse a malicious URI. A successful attack would result in the theft of
potentially confidential client data (cookies, authentication credentials, and more) or
Family Internet Services 716