(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a 'format string' flaw.\n\nThe remote host is
running PeerCast, a streaming audio server. This version of PeerCast is vulnerable to a
remote format string flaw within its HTTP server component. An attacker exploiting this
flaw would be able to crash the server or execute arbitrary code on the remote system.
Solution: Upgrade to version 0.1212 or higher.
CVE-2005-1806
Exhibit Engine < 1.5 RC 5 list.php Multiple Parameter SQL Injection
PVS ID: 2944 FAMILY: CGI RISK: HIGH NESSUS ID:18416
Description: The remote host is running Exhibit Engine, a web-based PHP application for sharing
photos. This version of Exhibit Engine is vulnerable to a remote SQL injection flaw. An
attacker exploiting this flaw would send a malformed HTTP query to the application.
Successful exploitation would result in the attacker being able to read or write confidential
data. In addition, the attacker may be able to execute arbitrary code on the remote database
server.
Solution: Upgrade to version 1.5 RC 5 or higher.
CVE-2005-1875
CROB FTP Server Multiple Command Remote Overflow DoS
PVS ID: 2945 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the CROB FTP Server. This version of CROB is vulnerable to a remote
stack-based overflow when sent a malformed RMD command. An attacker exploiting this
flaw would be able to execute arbitrary code. In addition, there are also multiple
heap-based overflows within many other FTP commands.
Solution: No solution is known at this time.
CVE-2006-6558
FlexCast < 2.0 Remote Overflow
PVS ID: 2946 FAMILY: Web Servers RISK: NONE NESSUS ID:18429
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running FlexCast, a streaming audio and video server. This version of FlexCast is
vulnerable to a remote buffer overflow. An attacker exploiting this flaw would be able to
execute arbitrary code on the remote system.
Solution: Upgrade to version 2.0 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 764