(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 0.88.2 or higher.
Limbo CMS <
CVE-2006-1989
PVS ID: 3526 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running the Limbo Content Management System (CMS). This version of Limbo is
vulnerable to a flaw where remote attackers can include arbitrary code within HTTP
requests. By using such a tactic, the remote attacker can execute arbitrary code with the
permissions of the remote web server. In addition, the remote host is vulnerable to a SQL
Injection attack. An attacker exploiting this flaw would send a malformed HTTP query to
the server that would, upon parsing, cause the web server to execute arbitrary SQL
commands on the backend database server.
Solution: No solution is known at this time.
CVE-2008-0734
MySQL Remote Overflow and Information Disclosure Vulnerabilities
PVS ID: 3527 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nAccording to its
version number, the installation of MySQL on the remote host may be prone to multiple
buffer overflows. The MySQL server is also vulnerable to multiple information disclosure
flaws. An attacker exploiting the overflow would need to be able to authenticate to the
MySQL server. An attacker exploiting the information disclosure flaw would only need to
be able to send malformed 'login' packets to the server. This version of MySQL is also
prone to a remote Denial of Service (DoS) due to an inability to properly parse a
malformed call to the date_format function.
Solution: Upgrade to version 4.0.27 / 4.1.19 / 5.0.27 / 5.1.10 or higher.
sBLOG <
CVE-2006-1516
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3528 FAMILY: CGI RISK: HIGH NESSUS ID:21313
Description: The remote web server contains a PHP script that is prone to SQL injection attacks. The
remote host is running sBLOG, a PHP-based blog application. The installed version of
sBLOG fails to validate user input to the 'keyword' parameter of the 'search.php' script
before using it to generate database queries. Regardless of PHP's 'magic_quotes_gpc'
setting, an unauthenticated attacker can leverage this issue to manipulate database queries
to bypass authentication, disclose sensitive information, modify data, or launch attacks
against the underlying database.
Family Internet Services 910