(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 2.3.2 or higher.
CVE-2005-1311
Fastream NETFile < 7.5.0 Beta 7 Directory Traversal Arbitrary File Access
PVS ID: 2860 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a directory traversal flaw.\n\nThe remote
host is running the Fastream NETFile web server. This version of NETFile is vulnerable to
a remote directory traversal flaw. An attacker exploiting this flaw would send a malformed
request to the HTTP server. Successful exploitation would result in the attacker gaining
access to confidential data outside the web server's root directory.
Solution: Upgrade to version 7.5.0 Beta 7 or higher.
CVE Not available
NetTerm FTP Server USER Command Remote Overflow
PVS ID: 2861 FAMILY: FTP Servers RISK: HIGH NESSUS ID:18142
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running NetTerm FTP Server. All versions of NetTerm FTP server are vulnerable to a
remote buffer overflow. The primary maintainers have removed netftpd.exe from all new
versions of their product. An attacker exploiting this flaw would be able to execute
arbitrary code on the remote FTP server.
Solution: No solution is known at this time.
CVE-2005-1323
BEA WebLogic < 8.1 SP5 Multiple Vulnerabilities
PVS ID: 2862 FAMILY: Web Servers RISK: HIGH NESSUS ID:18365
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a version of BEA WebLogic Server or WebLogic Express that is prone to
multiple vulnerabilities. These flaws could lead to buffer overflows, denial of service,
unauthorized access, cross-site scripting attacks, and information disclosure.
Solution: Upgrade to WebLogic 8.1.0 SP5 or higher.
CVE-2005-1749
Passive Vulnerability Scanner (PVS) Signatures
ZoneAlarm < 5.5.094.000 Undisclosed Vulnerability
PVS ID: 2863 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Family Internet Services 739