(PVS) Signatures - Tenable Network Security

or 'database.php' PHP scripts. Succesful exploitation would result in the attacker being able
to read or write confidential data. In some instances, the attacker may be able to execute
arbitrary code on the remote database server.
Solution: Upgrade to version 2.7.1 or higher.
CVE-2006-1094
Apache mod_python < 3.2.8 Remote Command Execution
PVS ID: 3453 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an flaw that allows attackers to execute
arbitrary commands.\n\nThe remote Apache server is running a version of mod_python that
is equal to 3.2.7. It is reported that a flaw was introduced with version 3.2.7. Specifically, if
'FileSession' has been enabled, a remote attacker can send a specially formatted session
cookie that will, upon being parsed, force mod_python into executing arbitrary code. The
exact details of the flaw are unknown.
Solution: Upgrade to version 3.2.8, 3.3.1 or higher.
CVE-2006-1095
vBulletin < 3.5.4 HTML Injection
PVS ID: 3454 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML Injection attack.\n\nThe version
of vBulletin installed on the remote host fails to properly sanitize user-supplied input.
Given this, the application is prone to an HTML injection attack. An attacker exploiting
this flaw would post a malicious entry to the vBulletin board. Unsuspecting users perusing
the board would have code executed within their browser. Successful exploitation could
lead to the theft of confidential data.
Solution: Upgrade to version 3.5.4 or higher.
CVE-2006-1040
RaidenHTTPd < 1.1.48 Crafted Request Script Source Disclosure
PVS ID: 3455 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote host is running RaidenHTTPd. RaidenHTTPd is a
web server that is designed for the Microsoft platform. This version of RaidenHTTPd is
vulnerable to a flaw where an attacker can send a malformed 'GET' request that will, upon
being parsed, cause the Raiden web server to send back potentially confidential files (such
as source code for active scripts).
Family Internet Services 889