(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running ClamAV, an open-source antivirus solution for Unix-like systems. This version of
ClamAV is reported to be vulnerable to a flaw where the parsing of a malicious file will
cause the clamav process to overflow system memory, possibly resulting in an attacker
executing code. An attacker exploiting this flaw would need to be able to send a specially
formed email to the system running ClamAV.
Solution: Upgrade to version 0.86.2 or higher.
CVE-2005-2450
Hobbit Monitor < 4.1.0 Remote DoS
PVS ID: 3109 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Hobbit Monitor, a web-based host/network monitoring software.
This version of Hobbit Monitor is prone to a remote denial of service attack. An attacker
sending a specially formatted string to the hobbitd process can force the software to crash.
Solution: Upgrade to version 4.1.0 or higher.
CVE Not available
FtpLocate Multiple Scripts fsite Parameter Remote File Inclusion
PVS ID: 3110 FAMILY: CGI RISK: HIGH NESSUS ID:19300
Description: Synopsis :\n\nThe remote host is vulnerable to an flaw that allows attackers to execute
arbitrary commands\n\nThe remote host is running FtpLocate, a web search engine for FTP
sites written in Perl.\n\nThe installed version of FtpLocate allows remote attackers to
execute commands on the remote host by manipulating input to the 'fsite' parameter in
various scripts.
Solution: No solution is known at this time.
CVE-2005-2420
Passive Vulnerability Scanner (PVS) Signatures
Atomic Photo Album apa_phpinclude.inc.php apa_module_basedir Parameter Remote File Inclusion
PVS ID: 3111 FAMILY: CGI RISK: HIGH NESSUS ID:19299
Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection attack.\n\nThe remote host
is running Atomic Photo Album, a free PHP-based photo gallery. The installed version of
Atomic Photo Album allows remote attackers to control the 'apa_module_basedir' variable
used when including PHP code in the 'apa_phpinclude.inc.php' script. By leveraging this
flaw, an attacker may be able to view arbitrary files on the remote host and execute
arbitrary PHP code, possibly taken from third-party hosts.
Family Internet Services 793