(PVS) Signatures - Tenable Network Security

IRC Client Detection
CVE-2005-2401
PVS ID: 3101 FAMILY: IRC Clients RISK: LOW NESSUS ID:Not Available
Description: The remote host is running an IRC client. The IRC command that triggered this plugin was:
\n %L
Solution: N/A
CVE Not available
SlimFTPd < 3.17 Multiple Commands Remote Overflow
PVS ID: 3102 FAMILY: FTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host
seems to be running a vulnerable version of SlimFTPd, a small FTP server for Windows. It
is reported that versions up to 3.16 are prone to buffer overflow vulnerability that may
allow an attacker to execute arbitrary code on this host. A attacker needs a valid FTP
account to exploit this vulnerability (to include anonymous access, if enabled).\n\nNOTE:
The SlimFTPd hotfix does not change the version number from 3.16 to 3.17. The version
number is: \n %L
Solution: Upgrade to version 3.17 or higher.
CVE-2004-2418
CMSimple < 2.5 Beta 3 Search Function XSS
PVS ID: 3103 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: The remote host is running a version of CMSimple, a content management system. This
version of CMSimple is vulnerable to a remote Cross-Site Scripting (XSS) attack. An
attacker exploiting this flaw would typically need to be able to convince a user to browse to
a malicious URI. Successful exploitation would result in arbitrary code executing in the
client browser and possible theft of confidential data (such as authentication cookies).
Solution: Upgrade to version 2.5 Beta 3 or higher.
CVE-2005-2392
Passive Vulnerability Scanner (PVS) Signatures
PHPNews < 1.3.0 auth.php Multiple Field SQL Injection
PVS ID: 3104 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running PHPNews, an open-source news application written
in PHP. The installed version of PHPNews is prone to a SQL injection attack due to its
failure to sanitize user-supplied input. An attacker can exploit this flaw to affect database
Family Internet Services 791