(PVS) Signatures - Tenable Network Security

network usage.
CVE Not available
UBB.threads < 6.5.2 Beta 2 XSS / SQL Injection
PVS ID: 3032 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection attack.\n\nThe remote host
is running a version of UBB.threads that fails to correctly parse multiple PHP scripts. A
remote attacker can send malformed HTTP requests that, when processed, forces the
UBB.threads server to execute arbitrary database commands or inject malicious code into
user browsers.\nAs a result, a remote attacker can pass malicious input to database queries,
potentially resulting in data exposure, modification of the query logic, or even data
modification or attacks against the database itself.
Solution: Upgrade to version 6.5.2 Beta 2 or higher.
CVE-2006-5136
ClamAV < 0.86.1 Content-parsing DoS
PVS ID: 3033 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running ClamAV, an open-source antivirus solution for Unix-like
systems.\nThis version of ClamAV is reported to be vulnerable to a flaw where the parsing
of a malicious file will cause the ClamAV process to crash. An attacker exploiting this flaw
would need to be able to send a specially formed email to the system running ClamAV.
Successful exploitation would result in loss of service. The installed version of ClamAV is:
\n %L
Solution: Upgrade to version 0.86.1 or higher.
CVE-2005-1923
True North eMailServer < 5.3.4 Build 2019 LIST Command Remote DoS
PVS ID: 3034 FAMILY: POP Server RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running the True North eMailServer.\nThis version of eMailServer is
vulnerable to a content-parsing flaw where a malformed IMAP request can cause the server
to fail. An attacker exploiting this flaw would be able to disable the service remotely.
Solution: Upgrade to version 5.3.4 Build 2019 or higher.
POP Banner Detection
CVE-2005-2083
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 774