(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 4.31 or higher.
CVE-2005-4445
PhpGedView PGV_BASE_DIRECTORY Parameter Remote File Inclusion
PVS ID: 3333 FAMILY: CGI RISK: HIGH NESSUS ID:20339
Description: Synopsis :\n\nThe remote web server contains a PHP application that is prone to a remote
file inclusion vulnerability.\n\nThe remote host appears to be running PhpGedView, a
web-based genealogy program written in PHP. The version of PhpGedView installed on the
remote host fails to sanitize user-supplied input to the 'PGV_BASE_DIRECTORY'
parameter of the 'help_text_vars.php' script before using it in a PHP 'require' function.
Provided PHP's 'register_globals' setting is enabled, an unauthenticated attacker may be
able to exploit this flaw to read arbitrary files on the remote host and or run arbitrary code,
possibly taken from third-party hosts, subject to the privileges of the web server user ID. In
addition, the application reportedly fails to sanitize user input to the 'user_language',
'user_email', and 'user_gedcomid' parameters of the 'login_register.php' script, which could
be used by an attacker to inject arbitrary PHP code into a log file that can then be executed
on the affected host, subject to the permissions of the web server user ID.
Solution: Upgrade to version 3.3.7 or 4.0 beta 3 and apply the patch referenced in the vendor
advisory above.
CVE-2005-4468
Network Block Device Server Detection
PVS ID: 3334 FAMILY: Generic RISK: LOW NESSUS ID:20340
Description: Synopsis :\n\nThe remote host is running a remote storage service.\n\nThe remote host is
running a Network Block Device (NBD) server, which allows one Linux host to use
another as one of its block devices.
Solution: Ensure that you are running the latest version of NBD.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Mantis < 0.19.5 Multiple Unspecified Vulnerabilities
PVS ID: 3335 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack as well as other unspecified vulnerabilities.\n\nThe remote host appears to be
running a vulnerable version of Mantis, a bug tracker web application written in PHP. It is
reported that versions 0.19.3 and lower are vulnerable to a number of flaws. While the
details of the flaws are unknown, it is believed that successful exploitation of the flaws
would lead to an attacker uploading files or executing code on the remote database.
Solution: Upgrade to version 0.19.5 (or 1.0.0 RC5) or higher.
Family Internet Services 860