(PVS) Signatures - Tenable Network Security

the attacker. An attacker exploiting this flaw would gain access to confidential data.
Solution: Upgrade to version 0.4.7.2 or higher.
CVE-2006-1243
Horde < 3.1 go.php url Parameter File Disclosure
PVS ID: 3477 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:21081
Description: The remote web server contains a PHP application that is affected by an information
disclosure flaw. The version of Horde installed on the remote host fails to validate input to
the 'url' parameter of the 'services/go.php' script before using it to read files and return their
contents. An unauthenticated attacker may be able to leverage this issue to retrieve the
contents of arbitrary files on the affected host subject to the privileges of the web server
user ID. This can result in the disclosure of authentication credentials used by the affected
application as well as other sensitive information. Note that successful exploitation of this
issue seems to require that PHP's 'magic_quotes_gpc' be disabled, although this has not
been confirmed by the vendor.
Solution: Upgrade to version 3.1 or higher.
CVE-2006-1260
Dwarf HTTP Server < 1.3.3 Multiple Vulnerabilities
PVS ID: 3478 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running the Dwarf HTTP Server. This version of Dwarf is vulnerable to multiple input
flaws due to a lack of data validation. An attacker exploiting these flaws will be able to
impact confidentiality and integrity on the remote server.
Solution: Upgrade to version 1.3.3 or higher.
CVE-2006-0820
PHP iCalendar Local File Inclusion
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3479 FAMILY: CGI RISK: HIGH NESSUS ID:17129
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running PHP iCalendar, an open-source PHP blog. This version of iCalendar is
vulnerable to a flaw wherein a local user can gain access to confidential data by requesting
the data from the iCalendar application. Successful exploitation would lead to a local user
gaining access to confidential data. In addition, the remote host is vulnerable to a remote
file upload flaw. An attacker exploiting this flaw would be able to manipulate the
application into uploading and executing potentially malicious scripts. The referenced URI
is:\n%P
Family Internet Services 896