(PVS) Signatures - Tenable Network Security

attacker the ability to execute arbitrary commands on the backend database server.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-1924
WebGUI < 6.8.6 'Anonymous' Account Creation
PVS ID: 3427 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running WebGUI, a content management framework. The
remote version of this software is vulnerable to a flaw where an anonymous user can be
created even if the Administrator has configured the site to reject the creation of
anonymous accounts. An attacker exploiting this flaw would only need to be able to send a
malformed HTTP request to the WebGUI server. Successful exploitation would lead to the
creation of an anonymous account.
Solution: Upgrade to version 6.8.6 or higher.
CVE-2006-0680
AttachmateWRQ Reflection for Secure IT Server SFTP Format String
PVS ID: 3428 FAMILY: SSH
RISK:
MEDIUM
NESSUS ID:20902
Description: The remote SSH server is affected by a format string vulnerability. The remote host is
running AttachmateWRQ Reflection for Secure IT Server / F-Secure SSH Server, a
commercial SSH server. According to its banner, the installed version of this software
contains a format string vulnerability in its SFTP subsystem. An remote authenticated
attacker may be able to execute arbitrary code on the affected host subject to his privileges
or crash the server itself.
Solution: Upgrade or patch according to vendor recommendations or edit the software's configuration
to disable the SFTP subsystem.
CVE-2006-0705
Passive Vulnerability Scanner (PVS) Signatures
Microsoft Windows Media Player Bitmap File Processing Overflow (911565)
PVS ID: 3429 FAMILY: Generic RISK: HIGH NESSUS ID:20905
Description: Synopsis :\n\nArbitrary code can be executed on the remote host through the Windows
Media Player.\n\nThe remote host is running Microsoft Media Player version 10. There is a
vulnerability in the remote version of this software that may allow an attacker to execute
arbitrary code on the remote host. To exploit this flaw, one attacker would need to set up a
rogue BMP image and send it to a victim on the remote host.
Family Internet Services 881