(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Kerio MailServer version 6.0.10 or lower. There is a flaw in the
remote version of this server that would allow an attacker to cause the application to fail.
While the details of the flaw are unknown, it is alledged that an attacker can launch the
attack without any credentials and render the target service unavailable.
Solution: Upgrade to version 6.1.3 Patch 1 or higher.
CVE-2006-0742
Easy File Sharing Web Server Format String
PVS ID: 3470 FAMILY: Web Servers RISK: HIGH NESSUS ID:21039
Description: Synopsis :\n\nThe remote web server suffers from a format string vulnerability.\n\nThe
remote host is running Easy File Sharing Web Server, a file sharing application / web
server for Windows. The version of Easy File Sharing Web Server installed on the remote
host may crash if it receives requests with an option parameter consisting of a format string.
It is unknown whether this issue can be exploited to execute arbitrary code on the remote
host, although it is likely the case. In addition, the application reportedly allows remote
users to upload arbitrary files to arbitrary locations on the affected host. An attacker may be
able to leverage this issue to completely compromise the host by placing them in the startup
folder and waiting for a reboot. Additionally, it fails to sanitize input to the 'Description'
field when creating a folder or uploading a file, which could lead to cross-site scripting
attacks. Note that by default the application runs with the privileges of the user who started
it, although it can be configured to run as a service.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-1160
Gallery < 2.0.4 Watermark Function stepOrder Parameter Local File Inclusion
PVS ID: 3472 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:21040
Description: Synopsis :\n\nThe remote web server contains a PHP application that is affected by
multiple local file include flaws.\n\nThe remote host is running Gallery, a web-based photo
album application written in PHP. The version of Gallery installed on the remote host fails
to sanitize input to the 'stepOrder' parameter of the 'upgrade/index.php' and
'install/index.php' scripts before using it in a PHP 'require()' function. An unauthenticated
attacker may be able to exploit this issue to view arbitrary files or to execute arbitrary PHP
code on the affected host provided PHP's 'register_globals' setting is enabled.
Solution: Upgrade to version 2.0.4 or higher.
CVE-2006-1219
Passive Vulnerability Scanner (PVS) Signatures
Ipswitch Multiple Products < 2006.03 IMAP FETCH Command Overflow
Family Internet Services 894