(PVS) Signatures - Tenable Network Security

other files. Successful exploitation of these issues requires that PHP's 'register_globals'
setting be enabled and can be used to view arbitrary files or to execute arbitrary PHP code
on the remote host, subject to the privileges of the web server user ID.
Solution: Upgrade to version 2.0.9.4 or higher.
CVE-2006-2516
Networker Multiple Vulnerabilities
PVS ID: 3630 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running EMC Legato Networker, an enterprise application that enables centralized file
management, backup and more. This version of Networker is vulnerable to a number of
vulnerabilities including buffer overflows. Given this, an attacker can gain full control of
the remote server using a number of attack vectors.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-3658
Woltlab Burning Board < 2.3.5 links.php cat Parameter SQL Injection
PVS ID: 3631 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running Woltlab Burning Board, a web bulletin board written
in PHP. This version of Burning Board is vulnerable to a remote SQL Injection attack. An
attacker exploiting this flaw would send a malformed 'cat' parameter to the 'links.php'
script. Succesful exploitation would result in the attacker being able to read or write
confidential data. In some instances, the attacker may be able to execute arbitrary code on
the remote database server.
Solution: Upgrade to version 2.3.5 or higher.
CVE-2006-3256
PostgreSQL SQL Injection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3632 FAMILY: Database RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running PostgreSQL, an open source relational database. This version is vulnerable to a
SQL Injection flaw when passed properly formatted SQL queries coupled with
invalidly-encoded multibyte data. An attacker exploiting this flaw would need to be able to
send queries to the PostgreSQL server. As such, this exploit typically requires
authentication. Successful exploitation would result in the attacker executing arbitrary SQL
commands on the database server.
Family Internet Services 936