(PVS) Signatures - Tenable Network Security

PVS ID: 2825 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files.\n\nThe remote WebSphere web server is vulnerable to an information leak.
There is a flaw in the way that WebSphere determines the web root directory based on the
HTTP 'Host' tag. An application server that has its root web directory defined in the Web
Servers root directory may disclose the source of .JSP files. JSP source code often contains
information that is useful for further attacks. This version of WebSphere is also vulnerable
to a remote Cross-Site Scripting (XSS) attack. An attacker exploiting this flaw would
typically need to convince a user to browse to a malicious URI. Successful exploitation
would result in the theft of confidential materials (such as authentication cookies).
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-1112
Serendipity < 0.72 exit.php Multiple Parameter SQL Injection
PVS ID: 2826 FAMILY: CGI RISK: LOW NESSUS ID:18155
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running Serendipity. Serendipity is a blogging software that is
implemented in PHP. This version of Serendipity is vulnerable to a remote SQL Injection
attack. Specifically, the 'url_id' parameter of the exit.php script does not properly parse out
SQL reserved characters. An attacker exploiting this flaw would send a malformed query to
the exit.php script. Successful exploitation would result in the attacker being able to read
data, write data, and possibly execute arbitrary commands.
Solution: Upgrade to version 0.72 or higher.
CVE-2005-1448
SPHPBlog search.php q Parameter XSS
PVS ID: 2827 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:18048
Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
remote host is running SPHPBlog, an open source blog application\nwritten in
PHP.\n\nDue to a lack of input validation bug, the remote version of this software can\nbe
used to perform a cross-site scripting attack.
Solution: No solution is known at this time.
CVE-2005-1135
IlohaMail < 0.8.14-RC3 read_message.php Multiple Field HTML Injection
PVS ID: 2828 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:18050
Family Internet Services 729