(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection attack.\n\nThe remote host
is running Brooky CubeCart, an online storefront application written in PHP. This version
of CubeCart is vulnerable to a flaw where arbitrary PHP code can be uploaded to the web
server and then executed with the permissions of the web server process. Successful
exploitation would only require that the attacker can send malformed HTTP requests to the
application.
Solution: Upgrade to version 3.0.7 or higher.
CVE-2006-0922
ArGoSoft Mail Server < 1.8.8.6 '_DUMP' Information Disclosure
PVS ID: 3447 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:20977
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote host is running the ArGoSoft Mail Server. This
version of ArGoSoft is prone to a remote unauthenticated access flaw. Specifically, as
ArGoSoft does not require authentication prior to allowing the _DUMP directive, an
unauthenticated user can cause the server to disclose potentially confidential data.
Successful exploitation would give the attacker confidential server data.\n\nSecondly, the
remote host is vulnerable to a directory traversal flaw within its IMAP component. An
attacker exploiting this flaw would need to be authenticated. Successful exploitation would
result in the attacker accessing confidential data outside of their default IMAP
folder.\n\nThirdly, the remote server is vulnerable to an HTML Injeciton attack.
Solution: Upgrade to version 1.8.8.6 or higher.
CVE-2006-0928
MTS Professional < 1.61.1.85 SMTP Open Relay
PVS ID: 3448 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote SMTP server can be tricked into relaying email, regardless of its
relay configuration.\n\nThe remote host is running the MTS Professional SMTP server.
This version of MTS is vulnerable to a flaw in the way that it handles malformed 'MAIL
FROM:' headers. An attacker exploiting this flaw would send malformed 'MAIL FROM:'
directives to the server. Successful exploitation would result in the attacker being able to
relay traffic through the host.
Solution: Upgrade to version 1.61.1.85 or higher.
CVE-2006-0977
Passive Vulnerability Scanner (PVS) Signatures
MDaemon < 8.15 IMAP Mail Folder Name Remote Overflow
PVS ID: 3449 FAMILY: Web Servers NESSUS ID:Not Available
Family Internet Services 887