(PVS) Signatures - Tenable Network Security

PVS ID: 3423 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a file upload flaw.\n\nThe remote host is
running RunCMS, a web-based messaging system. This version of RunCMS is vulnerable
to a remote file upload flaw. Specifically, an attacker can create a malicious .php3 or .php5
script and upload it to the RunCMS server. The attacker can then invoke the script, causing
arbitrary code to be run on the RunCMS system.
Solution: Upgrade to version 1.3a3 or higher, when available.
Powerd Detection
CVE-2006-1793
PVS ID: 3424 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is using Powerd (version : %L ), an open-source application, to monitor
UPS devices.
Solution: N/A
CVE Not available
Powerd WHATIDO Variable Remote Overflow
PVS ID: 3425 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using Powerd (version : %L ), an open-source application, to monitor the UPS device. This
version of Powerd is vulnerable to a remote overflow. An attacker exploiting this flaw will
be able to execute arbitrary code on the target machine.
Solution: Block access to the powerd server port (532) from untrusted clients.
LinPHA <
CVE-2006-0681
PVS ID: 3426 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:20892
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running LinPHA, a web photo gallery application written in PHP. The installed version
of LinPHA suffers from a number of flaws, several of which may allow an unauthenticated
attacker to view arbitrary files or to execute arbitrary PHP code on the remote host subject
to the privileges of the web server user ID. Note that successful exploitation requires that
PHP's 'magic_quotes_gpc' setting be disabled, that an attacker has the ability to create,
upload or edit files on the remote host, or that the application's 'user login events log'
setting be enabled. The host is also vulnerable to a cross-site scripting (XSS) and SQL
injection attacks. Attackers exploiting the XSS flaw would be able to potentially execute
malicious code within a user's browser. A successful SQL Injection attack would give the
Family Internet Services 880