(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running ClamAV, an open-source antivirus solution for Unix-like systems. This version of
ClamAV is reported to be vulnerable to a flaw where the parsing of a malicious file will
cause the clamav process to overflow system memory, possibly resulting in an attacker
executing code. An attacker exploiting this flaw would need to be able to send a specially
formed email to the system running ClamAV. In addition, this version of ClamAV is
vulnerable to a remote Denial of Service (DoS) attack that would render the service
unavailable to valid users.
Solution: Upgrade to version 0.86.3 or higher.
CVE-2005-2920
CuteNews flood.db.php HTTP Header PHP Code Injection
PVS ID: 3230 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection
attack.\n\nAccording to its version number, the remote host is running a version
of CuteNews that allows an attacker to inject arbitrary script code. An attacker
exploiting this flaw would be able to inject script code that would either be
executed locally or possibly executed within the browser of an unsuspecting
user.
Solution: No solution is known at this time.
CVE-2005-3010
vBulletin < 3.0.10 Multiple Vulnerabilities
PVS ID: 3231 FAMILY: CGI RISK: HIGH NESSUS ID:19760
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe version of
vBulletin installed on the remote host fails to properly sanitize user-supplied input to a
number of parameters and scripts before using it in database queries and to generate
dynamic HTML. An attacker can exploit these issues to launch SQL injection and
cross-site scripting attacks against the affected application. Note that the affected scripts
require moderator or administrator acess, with the exception of 'joinrequests.php'.
Solution: Upgrade to version 3.0.10 or higher.
CVE-2005-3025
Opera < 8.50 Mail Client Multiple Vulnerabilities
PVS ID: 3232 FAMILY: SMTP Clients
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Family Internet Services 830