(PVS) Signatures - Tenable Network Security

Solution: No solution is known at this time.
CVE-2005-3299
WebGUI < 6.7.6 Unspecified Code Execution
PVS ID: 3253 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an arbitrary 'code execution'
vulnerability.\n\nThe remote host is running WebGUI, a content management framework.
The remote version of this software is vulnerable to an undisclosed remote vulnerability
that would allow an attacker to execute arbitrary code with the permissions of the
webserver.
Solution: Upgrade to version 6.7.6 or higher.
CVE-2005-4694
ClamAV < 0.87.2 Content-parsing DoS
PVS ID: 3254 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running ClamAV, an open-source antivirus solution for Unix-like systems.
This version of ClamAV is reported vulnerable to a flaw where the parsing of a malicious
file will cause the clamav process to enter an infinite loop. Successful exploitation causes
the clamd service to exit.
Solution: Upgrade to version 0.87.2 or higher.
CVE-2005-3239
GNU WGet < 1.10.2 Buffer Overflow
PVS ID: 3255 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using a version of wget that contains a flaw in the way that it handles NTLM authentication
data. Specifically, a rogue website that returns malformed data during an NTLM
authentication session will be able to execute arbitrary code on the local client machine.
Solution: Upgrade to version 1.10.2 or higher.
CVE-2006-1985
Curl NTLM Buffer Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3256 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Family Internet Services 837