(PVS) Signatures - Tenable Network Security

script. Successful exploitation may allow an attacker to execute arbitrary SQL statements
against the remote host.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-2217
Acme thttpd < 2.26 htpasswd Utility Overflow
PVS ID: 3463 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a vulnerable version of Acme thttpd. It is reported that versions prior to 2.26
contain a flaw within the 'htpasswd' utility. The htpasswd binary does not correctly verify
the amount of data that it is parsing. Given this, a long argument passed to the htpasswd
utility may cause a buffer overflow. An attacker exploiting this flaw would need to be able
to find a system that calls htpasswd via a dynamic page (such as a CGI script). In addition,
the application is vulnerable to a flaw in the way that it creates local temporary files. A
local attacker exploiting this flaw would be able to modify or delete files with the privileges
of the thttpd server process.
Solution: Upgrade to version 2.26 or higher.
CVE-2006-1079
Geeklog lib-sessions.php Session Cookie Handling Administrative Bypass
PVS ID: 3464 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the
bypassing of authentication.\n\nThe remote host is running Geeklog, an
open-source weblog powered by PHP and MySQL. The installed version of
Geeklog is vulnerable to a flaw in the 'lib-sessions.php' script. Specifically, a
remote attacker can use the script to bypass authentication and gain
administrative access to the Geeklog application. Successful exploitation gives
the attacker the ability to gather confidential data, the ability to compromise file
integrity, and the ability to interrupt services to valid users.
Solution: Upgrade to version 1.3.11sr5, 1.3.9sr5, 1.4.0sr2, or higher.
CVE-2006-1069
Passive Vulnerability Scanner (PVS) Signatures
Owl Intranet Engine xrms_file_root Parameter Remote File Inclusion
PVS ID: 3465 FAMILY: CGI RISK: HIGH NESSUS ID:21025
Description: Synopsis :\n\nThe remote web server contains a PHP script that suffers from a remote file
include vulnerability.\n\nThe remote host is running Owl Intranet Engine, a web-based
document management system written in PHP. The version of Owl Intranet Engine on the
remote host fails to sanitize user-supplied input to the 'xrms_file_root' parameter of the
'lib/OWL_API.php' script before using it in a PHP 'require_once' function. An
Family Internet Services 892