(PVS) Signatures - Tenable Network Security

PVS ID: 2806 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw which allows attackers to retrieve
sensitive files.\n\nThe remote host is running Macromedia ColdFusion, a web application
server. This version of Macromedia is vulnerable to a flaw in the way that it stores its class
files. Specifically, a flaw in the Macromedia ColdFusion MX Updater causes compiled
Java classes to be stored in the '/WEB-INF/cfclasses' directory. A remote attacker can
retrieve the files and run a Java decompiler in order to decompile the binary code into
human-readable format.
Solution: Upgrade to ColdFusion 7.0 MX or higher.. There is also a workaround available for version
6.1.
CVE Not available
punBB < 1.2.5 profile.php SQL Injection
PVS ID: 2807 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:18005
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running punBB, a web-based bulletin board. This version of
punBB ( %L ) is vulnerable to a SQL injection attack. Due to a content-parsing flaw,
attackers can inject SQL commands into the 'change_email' parameter of the profile.php
script. An attacker exploiting this flaw would only need to be able to send HTTP requests
to the application. Successful exploitation would result in the attacker having the ability to
read or write to the database. In addition, the attacker may be able to execute arbitrary
commands on the remote system.
Solution: Upgrade to version 1.2.5 or higher.
CVE-2005-1051
Passive Vulnerability Scanner (PVS) Signatures
PostNuke < 0.760 RC4 Multiple XSS and SQL Injection Vulnerabilities
PVS ID: 2808 FAMILY: CGI RISK: HIGH NESSUS ID:18360
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running PostNuke version 0.760 RC3 or older. This version
of PostNuke is vulnerable to a remote Cross-Site Scripting (XSS) flaw. Specifically, failure
to parse malicious input to the 'op' parameter of the user.php script or the 'module'
parameter of the admin.php script can lead to the injection of script code. An attacker
exploiting this flaw would need to be able to entice the victim into browsing a malicious
URI. Successful exploitation would result in the attacker being able to inject arbitrary script
code into the browser of the unsuspecting user. This can lead to disclosure of confidential
information. In addition, the remote host is vulnerable to a remote SQL Injection attack. An
attacker exploiting this flaw would be able to read/write confidential database data.
Solution: Upgrade to version 0.760 RC4 or higher.
Family Internet Services 723