(PVS) Signatures - Tenable Network Security

Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-2692
CVS < 1.12.13 Local 'tmp' File Permission Vulnerability
PVS ID: 3181 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a local flaw in the way that it creates
temporary files.\n\nThe remote host is running a CVS server that, according to its version
number, is vulnerable to a flaw in the way that it creates and protects temporary files. A
local user exploiting this flaw may be able to write arbitrary information into critical CVS
files.
Solution: Upgrade to version 1.12.13 or higher.
CVE Not available
WebCalendar < 1.0.1 send_reminders.php includedir Parameter Remote File Inclusion
PVS ID: 3182 FAMILY: CGI RISK: HIGH NESSUS ID:19502
Description: Synopsis :\n\nThe remote host is vulnerable to a script injection attack.\n\nThe remote
version of WebCalendar fails to sanitize user-supplied input to the 'includedir' parameter of
the 'send_reminders.php' script. By leveraging this flaw, an attacker may be able to view
arbitrary files on the remote host and execute arbitrary PHP code, possibly taken from
third-party hosts.
Solution: Upgrade to version 1.0.1 or higher.
CVE-2005-2717
MPlayer < 1.0pre8 Audio Header strf Overflow
PVS ID: 3183 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using a version of MPlayer, a multimedia video and audio application. This version of
MPlayer is vulnerable to a buffer overflow due to a lack of content parsing. An attacker
exploiting this flaw would need to craft a malicious media file and then convince a local
user to download and play the file within MPlayer. Successful exploitation would result in
arbitrary code being executed locally.
Solution: Upgrade to version 1.0pre8 or higher.
CVE-2005-2718
Simple PHP Blog (SPHPBlog) <
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3184 FAMILY: CGI RISK: HIGH NESSUS ID:19516
Family Internet Services 817