(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote web server contains a PHP application that is affected by an
arbitrary file upload vulnerability.\n\nThe version of FCKeditor installed on the remote
host allows an unauthenticated attacker to upload arbitrary files containing PHP code and
then to execute them subject to the privileges of the web server user ID.
Solution: Either edit 'editor/filemanager/upload/php/config.php' to disable file uploads or upgrade to
FCKeditor 2.3 Beta or higher.
CVE-2006-2529
Skype Technologies < 2.5.0.78 Arbitrary File Download
PVS ID: 3627 FAMILY: Internet Messengers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote host is using Skype, a peer-to-peer chat and VoIP
software. The remote version of this software contains a flaw where a Skype client,
previously configured to allow downloads, will allow remote attackers to download
arbitrary files from the local file system. This can allow attackers to gain access to
confidential data that may be useful for more sophisticated attacks.
Solution: Upgrade to version 2.5.0.78 or higher.
CVE-2006-2312
Cyrus IMAPD < 2.3.4 'POP3D USER' Command Remote Overflow
PVS ID: 3628 FAMILY: IMAP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nAccording to its
banner, the remote Cyrus IMAPD server is vulnerable to a remote buffer overflow attack.
The flaw is in the way that IMAPD handles malformed data sent with the 'POP3D USER'
command. An attacker exploiting this flaw would need to be able to communicate with the
IMAPD server (usually on TCP port 143). A successful attack would result in the attacker
executing arbitrary code on the IMAPD server.
Solution: Upgrade to version 2.3.4 or higher.
CVE-2006-2502
XOOPS < 2.0.9.4 include/common.php nocommon Parameter Local File Inclusion
PVS ID: 3629 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:21581
Description: Synopsis :\n\nThe remote web server contains a PHP application that is vulnerable to local
file include attacks.\n\nThe version of XOOPS installed on the remote host allows an
unauthenticated attacker to skip processing of the application's 'include/common.php' script
and thereby to gain control of the variables '$xoopsConfig[language]' and
'$xoopsConfig[theme_set]', which are used by various scripts to include PHP code from
Family Internet Services 935