(PVS) Signatures - Tenable Network Security

ModernBill < 4.3.3 Multiple Vulnerabilities
PVS ID: 2812 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:18008
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is running ModernBill (%L ), a web hosting application written in PHP. This
version of ModernBill is vulnerable to several remote attacks. There are Cross-Site
Scripting (XSS) flaws in the 'aid' and 'c_code' parameters of the orderwiz.php script. An
attacker exploiting these flaws can inject script code into a URI. If the attacker can
convince a user into browse a malicious URI, there is a risk of confidential data being sent
back to the attacker. In addition, there is a flaw in the news.php script that would allow an
attacker to execute arbitrary server-side code on the web server. Versions of ModerBill
prior to 4.3.3 are also vulnerable to a SQL injection flaw. Successful exploitation would
allow a remote attacker the ability to execute arbitrary code on the database server.
Solution: Upgrade to version 4.3.3 or higher.
CVE-2005-1053
DC++ < 0.674 File Content Manipulation
PVS ID: 2813 FAMILY: Peer-To-Peer File Sharing
RISK:
MEDIUM
NESSUS ID:18012
Description: Synopsis :\n\nThe remote host may be tricked into running an executable file.\n\nThe
remote host is running DC++, an open source peer-to-peer client. The remote host is
reported to be prone to a vulnerability where attackers can append data to file transfers. The
details of this flaw are, at the time, undocumented. It is believed that a successful attack
would result in arbitrary code being run on the client machine (after a download is
complete).
Solution: Upgrade to version 0.674 or higher.
CVE-2005-1089
Pine < 4.63 rpdump Symlink Arbitrary File Overwrite
PVS ID: 2814 FAMILY: SMTP Clients RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a local flaw in the way that it creates
temporary files.\n\nPine versions 4.62 and below suffer from a vulnerability with the
rpdump utility. Rpdump ships with Pine by default. This version of rpdump is vulnerable to
a local file-access race condition. An attacker exploiting this flaw would need local access
to the machine as well as the knowledge of when a user was using rpdump. Successful
exploitation results in elevation of privileges.
Solution: Upgrade to version 4.63 or higher.
CVE-2005-1066
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 725