(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a remote 'file include' flaw.\n\nThe remote
host is running Squirrelmail, a web-based email client. This version of Squirrelmail is
vulnerable to a 'file include' flaw within the redirect.php script. An attacker exploiting this
flaw would be able to execute local commands. This can lead to the reading, writing or
deletion of critical data. To exploit this flaw, the attacker would only need to be able to
send web requests to the server.
Solution: Upgrade to version 1.4.8 or higher.
CVE-2006-2842
SpamAssassin spamd vpopmail Username Command Injection
PVS ID: 3640 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an arbitrary 'command insertion'
flaw.\n\nThe remote host is running SpamAssassin, an anti-spam software application that
detects and blocks spam emails. Due to a content-parsing error, SpamAssassin can be
tricked into executing arbitrary commands with the privileges of the SpamAssassin spamd
process. Additionally, the remote version of SpamAssassin must be running with either
'--vpopmail' or '--paranoid' enabled.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-2447
BASE < 1.2.5 BASE_path Parameter Remote File Inclusion
PVS ID: 3641 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:21611
Description: Synopsis :\n\nThe remote web server contains a PHP application that is prone to remote file
inclusion attacks.\n\nThe remote host is running BASE, a web-based tool for analyzing
alerts from one or more SNORT sensors. The version of BASE installed on the remote host
fails to sanitize input to the 'BASE_path' parameter before using it in PHP include_once()
function in several scripts. Provided PHP's 'register_globals' setting is enabled, an
unauthenticated attacker may be able to exploit this flaw to view arbitrary files on the
remote host or to execute arbitrary PHP code, possibly taken from third-party hosts.
Solution: Upgrade to version 1.2.5 or higher.
CVE-2006-2685
WinGate < 6.1.3 POST Request Buffer Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3642 FAMILY: Web Servers RISK: HIGH NESSUS ID:21674
Family Internet Services 939