(PVS) Signatures - Tenable Network Security

Solution: No solution is known at this time.
CVE-2006-2189
ArGoSoft FTP Server < 1.4.3.7 RNTO Overflow
PVS ID: 3529 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the ArGoSoft FTP Server. This version of ArGoSoft FTP Server is vulnerable to a
flaw when parsing a malicious RNTO command from an authenticated (or anonymous)
user. An attacker exploiting this flaw would be able to execute arbitrary code on the remote
FTP server.
Solution: Upgrade to version 1.4.3.7 or higher.
CVE-2006-2170
CGI:IRC Server Detection
PVS ID: 3530 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized according to
corporate policy.\n\nThe remote host is running CGI:IRC, a web-based IRC client that
allows users to access IRC channels via their web browser.
Solution: Ensure that the application is authorized according to corporate policies and guidelines.
CVE-2006-2148
Mozilla Firefox < 1.5.0.3 Multiple Vulnerabilities
PVS ID: 3531 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is using Firefox. The installed version of Firefox contains various security
issues, several of which are critical as they can be easily exploited to execute arbitrary shell
code on the remote host. The version of Firefox is vulnerable to multiple denial of service
attacks, overflows, information disclosure, privilege escalation, and other issues. An
attacker exploiting these flaws would need to be able to convince a user to browse to a
malicious URI.
Solution: Upgrade to version 1.5.0.3 or higher.
CVE-2006-1993
Passive Vulnerability Scanner (PVS) Signatures
FileZilla FTP Server < 0.9.17 MLSD Command Overflow
Family Internet Services 911