(PVS) Signatures - Tenable Network Security

Solution: No solution is known at this time.
CVE-2006-1250
Jetty < 5.16.0 JSP Source Code Disclosure
PVS ID: 3301 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server can disclose source code.\n\nThe remote host is
running Jetty, a Java web server that can be downloaded off the Internet and is currently
bundled with some IBM applications. This version of Jetty is vulnerable to a remote 'source
code disclosure' flaw. An attacker exploiting this flaw would append a '%5C' to the end of a
'.jsp' URI request. Successful exploitation would result in the attacker downloading source
code.
Solution: Upgrade to version 5.16.0 or higher.
CVE-2005-3747
MailEnable IMAP Service Remote DoS
PVS ID: 3302 FAMILY: IMAP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running a version of MailEnable's IMAP service that is prone to a remote
Denial of Service (DoS) attack. Specifically, an attacker requesting a nonexistent mailbox
can crash the service. An attacker exploiting this flaw would need to be able to authenticate
with some valid user account. Following successful authentication, the attacker would
request a nonexistent mailbox. Successful exploitation leads to a loss of availability.
Solution: Upgrade to MailEnable Professional 1.7.1 or higher or to MailEnable Enterprise Edition 1.2
or higher.
CVE-2006-0504
WebCalendar < 1.0.2 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3303 FAMILY: CGI RISK: HIGH NESSUS ID:20250
Description: The remote web server has a PHP application that is affected by multiple vulnerabilities.
The remote version of WebCalendar does not validate input to the 'id' and 'format'
parameters of the 'export_handler.php' script before using it to overwrite files on the remote
host, subject to the privileges of the web server user ID. In addition, the 'activity_log.php',
'admin_handler.php', 'edit_report_handler.php', 'edit_template.php' and 'export_handler.php'
scripts are prone to SQL injection attacks and the 'layers_toggle.php' script is prone to
HTTP response splitting attacks.
Family Internet Services 851