(PVS) Signatures - Tenable Network Security

PVS ID: 3035 FAMILY: POP Server RISK: NONE NESSUS ID:Not Available
Description: A POP server is running on this port. Its banner is :\n %L
Solution: N/A
CVE Not available
True North eMailServer < 5.3.4 Build 2019 LIST Command Remote DoS
PVS ID: 3036 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:18570
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running the True North eMailServer.\nThis version of eMailServer is
vulnerable to a content-parsing flaw where a malformed IMAP request can cause the server
to fail. An attacker exploiting this flaw would be able to disable the service remotely.
Solution: Upgrade to version 5.3.4 Build 2019 or higher.
CVE-2005-2083
PHP-Fusion < 6.00.106 submit.php Multiple Parameter HTML Injection
PVS ID: 3037 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML Injection attack.\n\nThe remote
host is running a version of PHP-Fusion that is vulnerable to an HTML injection flaw.
Specifically, the submit.php script fails to properly sanitize input data via the 'news_body',
'article_description', and 'user_pass' parameters. An attacker exploiting this flaw would
typically need to be able to convince a remote user to browse to a malicious URI. A
successful attack would yield potentially confidential data (cookies, credentials) as well as
potentially execute malicious code within the context of the vulnerable server.
Solution: Upgrade to version 6.00.106 or higher.
CVE-2005-2074
Passive Vulnerability Scanner (PVS) Signatures
phpBB < 2.0.16 viewtopic.php Arbitrary Code Execution
PVS ID: 3038 FAMILY: CGI RISK: HIGH NESSUS ID:18589
Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection attack.\n\nThe remote host
is running phpBB, a web-based forum application written in PHP. There is a flaw in this
version of phpBB that will allow remote attackers to inject arbitrary code into the
'viewtopic.php' script. An attacker exploiting this flaw would only need to be able to send
an HTTP request to the vulnerable script. Successful execution would result in the attacker
executing code with the permissions of the webserver.
Family Internet Services 775