(PVS) Signatures - Tenable Network Security

Solution: Upgrade to a version of Oracle Application Server higher than 10.1.2.0.0, when available.
CVE-2005-1383
PHPCoin < 1.2.2 2005-12-13 Multiple Script SQL Injection
PVS ID: 2867 FAMILY: CGI RISK: HIGH NESSUS ID:18166
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running phpCOIN version 1.2.2 or older. This version of
PHPCoin is vulnerable to a remote SQL injection attack. This vulnerability is possible due
to the login.php and mod.php scripts not properly parsing SQL reserved characters from the
user-supplied input. An attacker exploiting these flaws would be able to gain access to
confidential materials with both read and write access. In addition, the attacker may be able
to execute arbitrary code on the remote database server.
Solution: Upgrade to phpCOIN 1.2.2 with at least fix-file 2005-12-13 or higher.
CVE-2005-1384
ICUII Peer-To-Peer Client Detection
PVS ID: 2868 FAMILY: Peer-To-Peer File Sharing
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote client is running ICUII, a peer-to-peer client for messaging
and video. ICUII supports two primary modes: 'Family Oriented' and 'Adult'. There has
been at least one local bug associated with ICUII.
Solution: Ensure that ICUII is authorized with respect to corporate 'Appropriate Network Usage'
policies. If authorized, ensure that ICUII is running with the most recent version.
CVE-2005-1411
FilePocket File Sharing Application Detection
PVS ID: 2869 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote client is running FilePocket, an application for sharing
files via the Internet. There has been at least one local bug associated with FilePocket.
Solution: Ensure that FilePocket is authorized with respect to corporate 'Appropriate Network Usage'
policies. If authorized, ensure that FilePocket is running with the most recent version.
CVE-2005-1414
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 741