(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to unspecified remote attack vectors.\n\nThe
remote host is running ZoneAlarm, a personal firewall for the Windows platform. The
client is running a version of ZoneAlarm which is less than 5.5.094.000. This version of
ZoneAlarm is reported vulnerable to an undisclosed vulnerability and the vendor has
released version 5.5.094.000 to remediate risk.
Solution: Upgrade to version 5.5.094.000 or higher.
CVE Not available
PHP-Calendar < 0.10.3 includes/search.php SQL Injection
PVS ID: 2864 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running PHP-Calendar, a web-based calendar application
written in PHP. This version of PHP-Calendar is vulnerable to a remote SQL injection
attack. Specifically, the search.php script fails to parse out SQL-reserved characters and
would allow a remote attacker to read or write data as well as potentially execute arbitrary
code on the remote database.
Solution: Upgrade to version 0.10.3 or higher.
CVE-2005-1397
Claroline Multiple Remote Vulnerabilities
PVS ID: 2865 FAMILY: CGI RISK: HIGH NESSUS ID:18165
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running an older version of Claroline, an online e-learning
software. This version is vulnerable to multiple attacks that include, but are not limited to,
remote buffer overflow, HTML injection, Cross-Site Scripting (XSS), and SQL injection.
An attacker exploiting these flaws can gain access to confidential data, run arbitrary code,
and execute malicious code within victim browsers.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-1376
Passive Vulnerability Scanner (PVS) Signatures
Oracle Application Server Web Cache OHS mod_access Authentication Bypass
PVS ID: 2866 FAMILY: Web Servers RISK: LOW NESSUS ID:18181
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw which allows for the bypassing of
authentication.\n\nThe remote host is running the Oracle Application Server. This version
is reported vulnerable to an authentication bypass attack. Specifically, administrators may
restrict access using the 'mod_access' Oracle module. However, attackers may utilize the
Oracle Webcache service in order to bypass these restrictions. An attacker exploiting this
flaw would be able to elevate privileges and potentially gain access to administrative
functions or confidential data.
Family Internet Services 740