(PVS) Signatures - Tenable Network Security

properly parsed for SQL special characters. An attacker exploiting this flaw would send a
malicious cookie to the Coppermine application. Successful exploitation would result in the
attacker being able to read and write sensitive database data as well as potentially executing
arbitrary code on the remote database.
Solution: Upgrade to Coppermine greater than 1.3.2.
CVE-2005-1225
ArGoSoft Mail Server Multiple Vulnerabilities
PVS ID: 2847 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:18140
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is running the ArGoSoft Mail Server. This version of
ArGoSoft is prone to a remote, unauthenticated access flaw. Specifically, as ArGoSoft does
not require authentication prior to serving the 'addnew' script, an unauthenticated user can
perform administrative tasks. Successful exploitation would lead to the attacker being able
to add accounts and escalate their privileges on the remote server.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-1283
Woltlab Burning Board XSS / SQL Injection Vulnerabilities
PVS ID: 2848 FAMILY: CGI RISK: HIGH NESSUS ID:18251
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Woltlab Burning Board, a web bulletin board written in PHP. This version of
Burning Board is vulnerable to a remote Cross-Site Scripting (XSS) attack. An attacker
exploiting this flaw would typically need to convince a user to browse to a malicious URI.
Success exploitation would result in the theft of confidential materials (such as
authentication cookies).\n\nThis version of Woltlab is also vulnerable to a remote SQL
injection\nattack. An attacker exploiting this flaw would send a malformed\n'email' form
query to the 'verify_email()' function. Succesful exploitation\nwould result in the attacker
being able to read or write confidential\ndata. In some instances, the attacker may be able
to execute arbitrary\ncode on the remote database server.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-1642
phpBB < 2.0.15 admin_forums.php XSS
PVS ID: 2849 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:18124
Family Internet Services 735