(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote web server is affected by an authentication bypass flaw.\n\nThe
remote host is running ViRobot Linux Server, a commercial anti-virus application server.
The installed version of ViRobot Linux Server has a flaw such that an attacker can bypass
authentication and gain access to its 'filescan' component by supplying a special cookie. An
unauthenticated attacker may be able to leverage this flaw to delete arbitrary files on the
remote host or disable access to the service by submitting scans of a large number of large
files on the remote host.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-0864
Mambo Undisclosed Authentication Bypass
PVS ID: 3444 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is running the Mambo Content Server, an application
for generating dynamic content for web servers. The remote application is vulnerable to a
flaw where remote attackers can bypass authentication and access confidential data. The
exact details of the flaw are unknown; however, it is believed that an attacker exploiting
this flaw would be able to access confidential data that was readable by the web server
process.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-1794
Winamp < 5.14 .M3U File Handling Buffer Overflow
PVS ID: 3445 FAMILY: Generic RISK: HIGH NESSUS ID:20826
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using Winamp, a popular media player for Windows. It is possible that a remote attacker
using a specially-crafted playlist can cause a buffer overflow in the version of Winamp
installed on the remote host, resulting in a crash of the application or even execution of
arbitrary code subject to the user's privileges. An attacker exploiting this flaw would need
to be able to convince a Winamp user to open a malicious '.m3u' file.
Solution: Upgrade to version 5.14 or higher.
CVE-2006-0720
Brooky CubeCart < 3.0.7 connector.php Arbitrary File Upload
PVS ID: 3446 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Family Internet Services 886