(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 7.5.1 or higher.
CVE-2006-2830
Courier Mail Server < 0.53.2 Crafted Username Encoding DoS
PVS ID: 3646 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Courier Mail Server, an open source mail server for Linux and Unix.
The installed version of Courier is prone to a flaw in the way that it handles malformed
'login' strings. Specifically, an attacker who sends a username that includes a '
Solution: Upgrade to version 0.53.2 or higher.
CVE-2006-2659
WordPress < 2.0.3 Arbitrary Code Injection
PVS ID: 3647 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an arbitrary 'command insertion'
flaw.\n\nThe remote WordPress application is vulnerable to an arbitrary 'code injection'
flaw. The application fails to sanitize cached 'username' data. An attacker exploiting this
flaw would send a malformed request to the WordPress application. Successful exploitation
would result in the attacker running arbitrary commands with the permission of the
WordPress application. The path to the vulnerable WordPress application is '%P'
Solution: Upgrade to version 2.0.3 or higher.
CVE-2006-2667
WinSCP < 3.8.2 Arbitrary Command Insertion
PVS ID: 3648 FAMILY: SSH RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to an arbitrary 'command insertion'
flaw.\n\nThe remote host is running WinSCP, a file transfer application that utilizes Secure
Shell (SSH) as the transport protocol. This version of WinSCP is vulnerable to a flaw in the
way that it parses URI strings. An attacker exploiting this flaw would need to be able to
convince a WinSCP user to click on a malicious URI. Successful exploitation would result
in the attacker executing arbitrary commands with the rights of the user running WinSCP.
The reported version of WinSCP is: \n %L
Solution: Upgrade to version 3.8.2 or higher.
CVE-2006-3015
MyBB < 1.1.3 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 941