(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote web server contains a PHP application that is affected by
multiple remote file inclusion vulnerabilities.\n\nThe remote host is running dotProject, a
web-based, open-source project management application written in PHP. The installed
version of dotProject fails to sanitize user input to various parameters and scripts before
using it in calls to PHP functions such as 'include', and 'require_once()'. Provided PHP's
'register_globals' setting is enabled, an unauthenticated attacker may be able to leverage
these issues to view arbitrary files or to execute arbitrary PHP code on the remote host,
subject to the privileges of the web server user ID.
Solution: Upgrade to version 2.0.2 or higher.
CVE-2006-0755
Mac OS X < 10.4.5 Multiple Vulnerabilities
PVS ID: 3434 FAMILY: Operating System Detection RISK: LOW NESSUS ID:20911
Description: Synopsis :\n\nThe remote host is missing a Mac OS X update that fixes a security
issue.\n\nThe remote host is running a version of Mac OS X 10.4 that is older than version
10.4.5. Mac OS X 10.4.5 contains several security fixes for a local denial of service
vulnerability. A malicious local user may trigger the vulnerability by invoking an
undocumented system call.
Solution: Upgrade to version 10.4.5 or higher.
CVE-2006-0382
WordPress < 2.0.1 Arbitrary Script Injection
PVS ID: 3435 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection attack.\n\nThe installed
version of WordPress on the remote host will accept and execute arbitrary PHP code. This
version of Wordpress is vulnerable to a flaw where a remote attacker can, by sending a
malformed request, execute arbitrary code on the WordPress server. The path to the
installed Wordpress installation is:\n%P
Solution: Upgrade to version 2.0.1 or higher.
CVE-2006-0733
Coppermine Gallery < 1.4.4 Script Injection
PVS ID: 3436 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection attack.\n\nThe remote host
is running CopperMine Gallery, a set of PHP scripts to handle galleries of pictures. There is
an injection flaw in this version of Coppermine Gallery. An attacker exploiting this flaw
would only need to be able to send standard HTTP requests to the server. Successful
exploitation would result in the attacker running arbitrary code with the permissions of the
Family Internet Services 883