(PVS) Signatures - Tenable Network Security

CVE-2006-1705
Software602 602Pro LAN SUITE < 2004.0.05.0509 Directory Traversal Arbitrary File Access
PVS ID: 2883 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a directory traversal flaw.\n\nThe remote
host is running the 602Pro LAN SUITE, an application that provides web, FTP, telnet,
DNS, RealAudio, SSL services and proxying. This version of 602Pro LAN SUITE is
vulnerable to a remote directory traversal attack within the 'mail' scripts 'A' parameter. An
attacker exploiting this flaw would simply supply a typical '../../' directory traversal query to
the 'A' parameter. Successful exploitation would give the attacker access to any files on the
remote system. This introduces a loss of confidentiality.
Solution: Upgrade to version 2004.0.05.0509 or higher.
CVE-2005-1423
Apache htdigest realm Variable Overflow
PVS ID: 2884 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host
appears to be running a version of Apache, an open source web server. This version of
Apache is vulnerable to a flaw in the 'htdigest' utilility. Specifically, a long user-supplied
realm will cause an overflow and execution of arbitrary code. This issue is not considered a
local flaw, as the program is not run setuid. An attacker exploiting this flaw would need to
find a vulnerable Apache Web server that was making a call to 'htdigest' via a CGI script.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-1344
WebStar Mail < 5.4.1 Tomcat Plugin Remote Overflow
PVS ID: 2885 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running WebSTAR Mail, a mail server for Mac OS X that offers its services via a web
interface. WebStar runs with the Tomcat plugin enabled by default. This version of
WebStar is vulnerable to an attack against the Tomcat plugin. Specifically, a long,
user-supplied URI will result in a buffer overflow. Successful exploitation would lead to
the execution of arbitrary code on the remote server.
Solution: Upgrade to a version greater than 5.4.1.
CVE-2005-1507
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 746