(PVS) Signatures - Tenable Network Security

CVE-2005-1009
Woppoware Postmaster < 4.2.3 Multiple Vulnerabilities
PVS ID: 2896 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:18246
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Woppoware Postmaster, a suite of products that allows users to surf the web via
a proxy, connect to email accounts via a web interface, send and receive email, and
remotely administer the services. This version of Postmaster is reported to be vulnerable to
a number of flaws. An attacker exploiting these flaws would be able to gain access to
confidential data, compromise the integrity of the machine, and impact the availability of
the services.
Solution: Upgrade to version 4.2.3 or higher.
CVE-2005-1652
BoastMachine < 3.1 users.inc.php Arbitrary File Upload
PVS ID: 2897 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:18247
Description: Synopsis :\n\nThe remote host is vulnerable to a 'file upload' flaw.\n\nThe remote host is
running BoastMachine, a blogging software. This version of BoastMachine is vulnerable to
a flaw in the users.inc.php script. Specifically, a remote user can pass a specially formatted
HTTP request to the BoastMachine script and cause it to upload unsafe files. After upload,
the attacker can then execute the files with the permissions of the web server. In addition,
the attacker can leave malicious scripts that are executed by unsuspecting users who browse
the web page.
Solution: Upgrade to version 3.1 or higher.
CVE-2005-1580
MaxWebPortal < 1.360 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2898 FAMILY: CGI RISK: NONE NESSUS ID:18248
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nMaxWebPortal is
a web portal that utilizes a backend SQL or MySQL database. This version of
MaxWebPortal is vulnerable to multiple flaws that include: HTML injection, cross-site
scripting (XSS) and SQL Injection. An attacker exploiting these flaws would only need to
be able to send HTTP queries to the remote application. A successful attack would give the
attacker the ability to read and write database data as well as potentially execute arbitrary
remote commands on the database server. The HTML injection and XSS flaws would
typically require that the attacker be able to coerce a user into browsing to a malicious URI.
Successful exploitation would result in arbitrary code executing in the client browser and
possible theft of confidential data (such as authentication cookies).
Family Internet Services 750