(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running the SunOne Web Proxy. Alledgedly, successful exploitation of an
overflow would result in a Denial of Service (DoS), thereby rendering the service
unuseable to valid users.
Solution: Upgrade to 3.6 SP8 or higher.
CVE-2005-4806
Sawmill < 7.1.14 GET Request Query String XSS
PVS ID: 3219 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:19681
Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
remote host is running Sawmill, a weblog analysis package. The version of Sawmill
installed on the remote host suffers from a cross-site scripting flaw because its standalone
web server treats an arbitrary query string appended to a GET request as a configuration
command and fails to sanitize it before using it in an error page. An unauthenticated
attacker may be able to exploit this issue to steal authentication information of users of the
affected application.
Solution: Upgrade to version 7.1.14 or higher or use Sawmill in CGI mode.
CVE-2005-2950
punBB < 1.2.7 Multiple SQL Injection Vulnerabilities
PVS ID: 3220 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running punBB, a web-based bulletin board. This version of
punBB ( %L ) is vulnerable to a SQL Injection attack. Due to a content-parsing flaw,
attackers can inject SQL commands into a PHP script. An attacker exploiting this flaw
would only need to be able to send HTTP requests to the application. Successful
exploitation would result in the attacker having the ability to read or write to the database.
In addition, the attacker may be able to execute arbitrary commands on the remote system.
Solution: Upgrade to version 1.2.7 or higher.
CVE-2005-4665
Passive Vulnerability Scanner (PVS) Signatures
Linksys Wireless Router < 4.20.7 Multiple Vulnerabilities
PVS ID: 3221 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a Linksys wireless router. This version of the router is vulnerable to multiple
remote flaws. An attacker exploiting these flaws would need to be on the internal network
and have the ability to craft HTTP requests to the default Linksys web server. Successful
Family Internet Services 827