(PVS) Signatures - Tenable Network Security

CVE-2005-2432
Opera Multiple Injection Vulnerabilities
PVS ID: 3153 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may be tricked into running an executable file.\n\nThe
remote host is using a version of Opera that is vulnerable to a download dialog spoofing
flaw. Specifically, a malicious web site operator can create downloadable files that, upon
download, appear to be innocent. For example, the user may think that they are
downloading and opening a text file when in fact they are running an executable.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-2406
MetaSploit < 2.4-current Unspecified Vulnerability
PVS ID: 3154 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to unspecified remote attack vectors.\n\nThe
remote server is running a MetaSploit Framework server. Metasploit allows users to
automatically exploit and backdoor vulnerable applications via the network. This version of
MetaSploit is reported vulnerable to an unspecified issue.
Solution: Upgrade to version 2.4-current or higher.
CVE-2005-2482
BusinessMail SMTP < 4.7 Multiple Command Remote Overflows
PVS ID: 3155 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple buffer overflows.\n\nThe remote
host is running a version of BusinessMail that fails to sanitize user-supplied SMTP input.
An attacker exploiting this flaw would be able to potentially execute malicious code on the
remote server.
Solution: Upgrade to version 4.7 or higher.
CVE-2005-2472
NetworkActiv < 3.5.14 Multiple Parameter XSS
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3156 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: The remote host is running NetworkActiv, a web server. This version of NetworkActiv is
vulnerable to a remote Cross-Site Scripting (XSS) attack. An attacker exploiting this flaw
would typically need to convince a user to browse to a malicious URI. Success exploitation
would result in the theft of confidential materials (such as authentication cookies).
Family Internet Services 809