(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running the GLD Greylisting server. A Greylisting server is one that forces SMTP
servers to re-send an email. By forcing a re-send, SPAM can be greatly throttled down.
Versions of GLD prior to 1.5 are prone to multiple remote attack vectors.
Solution: Upgrade to version 1.5 or higher.
CVE-2005-1100
EGroupWare < 1.0.0.007 Attachment Information Disclosure
PVS ID: 2819 FAMILY: CGI RISK: HIGH NESSUS ID:15719
Description: Synopsis :\n\nThe remote email client may attach unrequested attachments to an outgoing
email.\n\nThe remote host is running eGroupWare, a web-based groupware solution. It is
reported that versions prior 1.0.0.007 are prone to an information disclosure vulnerability.
Specifically, if a user composes an email with an attachment and then cancels the email, the
attachment will be attached and sent with the next outbound email.
Solution: Upgrade to eGroupWare 1.0.0.007 or higher.
CVE-2005-1202
PHPBB2 < 2.0.14 Multiple Vulnerabilities
PVS ID: 2820 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:18573
Description: The remote host is running phpBB2, a web-based bulletin board written in PHP. This
version of phpBB2 is vulnerable to multiple Cross-Site Scripting (XSS) attacks. An
attacker exploiting this flaw would need to be able to entice a user into browsing a
malicious URI. Successful exploitation would lead to the attacker executing code within the
client browser possibly resulting in the theft of confidential data.
Solution: Upgrade to version 2.0.14 or higher.
CVE-2005-1115
Passive Vulnerability Scanner (PVS) Signatures
PHP Photo Album < 2.0.14 Multiple Vulnerabilities
PVS ID: 2821 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running Photo Album, a phpBB module that enables users to
easily share photo albums via the internet. This version of Photo Album is vulnerable to a
SQL injection attack within the 'mode' parameter of the album_search.php script. An
attacker exploiting this flaw would send a malformed query to the album_search.php script
which, when processed, would give the attacker the ability to read and/or modify data. In
addition, the attacker may be able to execute arbitrary code. Photo Album is also vulnerable
to a Cross-Site Scripting (XSS) attack within the 'sid' parameter of the album_cat.php and
album_comment.php scripts. An attacker exploiting this flaw would need to convince a
Family Internet Services 727