(PVS) Signatures - Tenable Network Security

malicious code being executed within the client browser. An attacker exploiting the SQL
injection flaw would only need to be able to send HTTP queries to the remote application.
A successful attack would give the attacker the ability to read and write database data as
well as potentially execute arbitrary remote commands on the SQL or MySQL system.
Solution: Upgrade to version 1.36 or higher.
CVE-2005-1016
Bakbone NetVault Multiple Vulnerabilities
PVS ID: 2784 FAMILY: Generic RISK: HIGH NESSUS ID:18257
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Bakbone NetVault, an enterprise backup/restore application. This version of
NetVault is vulnerable to a remote heap overflow as well as a local content-parsing
overflow. An attacker exploiting the first flaw would need to be able to connect to the
application on port 20031. A successful exploit would result in arbitrary code being
executed by the SYSTEM process. An attacker exploiting the second flaw would need local
read/write access to the Netvault configuration files. A successful attack would lead to
arbitrary code being executed.
Solution: No solution is known at this time.
CVE-2005-1547
Windows 2003 SP1 Server Detection
PVS ID: 2785 FAMILY: Operating System Detection RISK: NONE NESSUS ID:Not Available
Description: The remote host is running Windows 2003 Server SP1.
Solution: N/A
CVE Not available
Windows 2003 (No Service Pack) Multiple Vulnerabilities
PVS ID: 2786 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is running Windows 2003 Server. Multiple vulnerabilities were fixed in
SP1.\nThe reported version of Microsoft 2003 running on this server is: \n %L
Solution: Upgrade to Windows 2003 SP1 or higher.
CVE-1999-0662
Passive Vulnerability Scanner (PVS) Signatures
phpMyAdmin < 2.6.2 RC1 Remote Command Execution
PVS ID: 2787 FAMILY: CGI NESSUS ID:17689
Family Internet Services 717