(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Serv-U FTP server. There is a bug in the way this version handles
certain unspecified commands. While the details of the overflow are unknown, it is
reported that successful exploitation leads to a Denial of Service (DoS) attack.
Solution: Upgrade to version 6.1.0.4 or higher.
Simple PHP Blog <
CVE-2005-3467
PVS ID: 3278 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running Simple PHP Blog, a blog written in PHP. The version of Simple PHP Blog
installed on the remote host is vulnerable to a SQL Injection flaw. An attacker exploiting
this flaw would send malformed PHP queries to the application. Successful exploitation
would result in the attacker executing arbitrary commands on the backend database.
Solution: No solution is known at this time.
CuteNews <
CVE-2005-3473
PVS ID: 3279 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: According to its version number, the remote host is running a version of CuteNews that
allows an attacker to upload or download files outside of the web root directory. This can
lead to an attack against both confidentiality and integrity. An attacker exploiting this flaw
would simply send a malformed request including a '../' in the request. Successful
exploitation leads to writing or reading arbitrary files outside of the web root.
Solution: Upgrade to a version of CuteNews higher than 1.4.1.
CVE-2005-3507
Quicktime < 7.0.3 (Windows) Detection
PVS ID: 3280 FAMILY: Web Clients RISK: HIGH NESSUS ID:20136
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote Windows
host is running a version of Quicktime 7 that is older than Quicktime 7.0.3. This version is
vulnerable to various buffer overflows that may allow an attacker to execute arbitrary code
on the remote host by sending a malformed file to a victim and have him open it using
QuickTime player.
Solution: Upgrade to version 7.0.3 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 844