(PVS) Signatures - Tenable Network Security

CVE-2005-3532
Contenido < 4.6.4 class.inuse.php Multiple Parameter Remote File Inclusion
PVS ID: 3323 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an flaw that allows attackers to execute
arbitrary commands\n\nThe remote host is running Contenido, a web content-management
application. This version of Contenido is vulnerable to an unspecified 'command execution'
flaw. It is reported that an attacker can, by sending a malformed query, coerce the
application into running system commands. This flaw can only be executed if the
"allow_url_fopen" and "register_globals" PHP variables are enabled. Successful
exploitation would result in loss of confidential data as well as a compromise of system
integrity.
Solution: Upgrade to version 4.6.4 or higher.
Lyris List Manager <
CVE-2005-4132
PVS ID: 3324 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Lyris List Manager, a mailing list manager. This version of Lyris is vulnerable to
multiple flaws. There is a flaw in the way that Lyris handles SQL queries that an attacker
could use to execute arbitrary commands on the backend database. There is a flaw that
would allow an attacker to execute arbitrary commands with the permissions of the web
server. Finally, there are several flaws that would allow an attacker to access information
that was not intended for public consumption. An attacker exploiting these flaws would
likely be able to access confidential data and tarnish the integrity of both the web server
and the database.
Solution: Upgrade to a version higher than 8.8a.
CVE-2005-4142
Sights 'N Sounds Media Server <
PVS ID: 3325 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Sights 'N Sounds, a media server that streams content to remote web clients. This
version of Sights 'N Sounds is vulnerable to a remote buffer overflow. Specifically, when
an attacker sends an overly long request such as 'GET /MediaListing.exe?', it causes the SWS.exe process to overwrite memory and either crash or
execute arbitrary code.
Solution: Upgrade to a version of higher than 2.0.3b.
Family Internet Services 857