(PVS) Signatures - Tenable Network Security

is vulnerable to a remote buffer overflow. An attacker exploiting this flaw would need to be
able to convince a user to browse to a malicious website and execute a malicious ActiveX
control. Successful exploitation would lead to the attacker executing arbitrary code on the
remote system.
Solution: No solution is known at this time.
CVE-2005-2844
Barracuda Spam Firewall < Firmware 3.1.18 Multiple Vulnerabilities
PVS ID: 3200 FAMILY: Web Servers RISK: HIGH NESSUS ID:19556
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
appears to be a Barracuda Spam Firewall appliance, which protects mail servers from spam
and viruses. It appears that the installed appliance suffers from several vulnerabilities that
allow for execution of arbitrary code and reading of arbitrary files, all subject to the
permissions of the web server user ID.
Solution: Upgrade to firmware 3.1.18 or higher.
CVE-2005-2847
SlimFTPd Multiple Command Remote Overflow DoS
PVS ID: 3201 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:19588
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host appears to be using SlimFTPd, a free, small standards-compliant FTP server
for Windows. The installed version of SlimFTPd on the remote host suffers from a denial
of service vulnerability. By sending 'user' and 'pass' commands that are each 40 bytes long,
an attacker will crash the service after a short period of time.
Solution: No solution is known at this time.
CVE-2005-2850
PHPGroupWare < 0.9.16.007 Main Screen Message Script Injection
PVS ID: 3202 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection attack.\n\nThe remote host
seems to be running PHPGroupWare, a groupware system implemented in PHP. This
version is reported vulnerable to a flaw where the Administrator can inject script code into
the browsers of unsuspecting users.
Solution: Upgrade to version 0.9.16.007 or higher.
CVE-2005-2761
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 822