(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 7.3.15, 7.4.13, 8.0.8, 8.1.4, or higher.
CVE-2006-2314
Nucleus CMS < 3.23 PLUGINADMIN.php DIR_LIBS Parameter Remote File Inclusion
PVS ID: 3633 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:21596
Description: Synopsis :\n\nThe remote web server contains a PHP script that is prone to remote file
inclusion attacks.\n\nThe remote host is running Nucleus CMS, an open-source content
management system. The version of Nucleus CMS installed on the remote host fails to
sanitize input to the 'DIR_LIBS' parameter before using it in a PHP include() function in
the 'nucleus/libs/PLUGINADMIN.php' script. Provided PHP's 'register_globals' setting is
enabled, an unauthenticated attacker may be able to exploit this flaw to view arbitrary files
on the remote host or to execute arbitrary PHP code, possibly taken from third-party hosts.
Solution: Upgrade to version 3.23 or higher.
CVE-2006-2583
MDaemon < 8.1.4 Remote Overflow
PVS ID: 3634 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Alt-N MDaemon, an SMTP/IMAP server for Windows. According to its banner,
the version of MDaemon on the remote host is prone to a remote buffer overflow. Versions
of Alt-N prior to 8.1.4 are vulnerable. The attacker exploiting this flaw would send a
malformed request before the authentication process. Successful exploitation would allow
the attacker to execute arbitrary code.
Solution: Upgrade to version 8.1.4 or higher.
CVE-2006-2646
Geeklog < 1.4.0sr3 Multiple Injection Vulnerabilities
PVS ID: 3635 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Geeklog, an open-source weblog powered by PHP and MySQL. The installed
version of Geeklog is vulnerable to both Cross-Site Scripting and SQL Injection flaws. An
attacker exploiting the SQL injection flaw would be able to execute arbitrary SQL
commands on the backend database server. Exploitation of the XSS flaws would enable the
attacker to execute script code within the vulnerable user's browser.
Solution: Upgrade to version 1.4.0sr3 or higher.
CVE-2006-2699
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 937