(PVS) Signatures - Tenable Network Security

lucidCMS Login Form Field SQL Injection
PVS ID: 3246 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a
SQL injection attack.\n\nAccording to its version number, the remote host is
running a version of lucidCMS that suffers from a SQL Injection flaw. An
attacker exploiting these flaws would be able to inject commands into SQL
statements or inject executable code which would be executed by the database
server.
Solution: No solution is known at this time.
CVE-2005-3130
Squid < 2.5 STABLE11 NTLM Authentication Header DoS
PVS ID: 3247 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote proxy is vulnerable to a DoS attack.\n\nThe remote squid
caching proxy, according to its version number, is vulnerable to an attack where an
attacker can disable the Squid proxy by sending a malformed NTLM request.
Successful exploitation leads to a loss of availability.
Solution: Upgrade to version 2.5 STABLE11 or higher.
CVE-2005-2917
IceWarp Web Mail Multiple Vulnerabilities
PVS ID: 3248 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:19782
Description: Synopsis :\n\nIt is possible to retrieve or delete local files on the remote system through the
WebMail.\n\nThe remote host is running IceWarp Web Mail, a webmail solution available
for the Microsoft Windows platform. The remote version of this software is vulnerable to a
Directory Traversal vulnerability that may allow an attacker to retrieve arbitrary files on the
system. Another input validation flaw allows an attacker to delete arbitrary files on the
remote host. In addition, the existence of these two flaws indicates that IceWarp is
vulnerable to cross-site scripting attack.
Solution: No solution is known at this time.
CVE-2005-3131
4D WebStar < 5.3.5 IMAP Mac OS Client DoS
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3249 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Family Internet Services 835