(PVS) Signatures - Tenable Network Security

PVS ID: 3656 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running the Mambo Content Server, an application for generating dynamic content for
web servers. The remote application is vulnerable to a flaw where remote attackers can
execute arbitrary SQL commands on the database server utilized by Mambo. In order to
exploit this flaw, an attacker would only need to send a malformed HTTP query containing
SQL commands to the 'Name' field of the 'Submit Weblink' form. Successful exploitation
would result in a potential loss of confidentiality, integrity, and availability on the remote
database server.
Solution: Upgrade to version 4.6.1 or higher.
CVE-2006-3262
TWiki Privilege Escalation
PVS ID: 3657 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running the TWiki web application. This version of TWiki is vulnerable to a flaw where
users can escalate their privileges, giving them administrative rights to the application. A
valid user account is required in order to exploit this flaw. Successful exploitation leads to
the attacker gaining administrative access. This can lead to a loss of confidentiality,
integrity, and availability. In addition, the remote TWiki application is vulnerable to a 'file
upload' flaw. An attacker exploiting this flaw would be able to insert and execute arbitrary
script code with the permissions of the web server process. This can also lead to a loss of
confidentiality, integrity, and availability.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-2942
Winamp < 5.22 MIDI File Handling Overflow
PVS ID: 3658 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Winamp, a multimedia software application. This version of Winamp is vulnerable
to a buffer overflow. Specifically, when handling a malformed MIDI file, Winamp may
crash, possibly executing arbitrary code. An attacker exploiting this flaw would need to be
able to convince a Winamp user to open a malicious MIDI file.
Solution: Upgrade to version 5.22 or higher.
CVE-2006-3228
Passive Vulnerability Scanner (PVS) Signatures
Clearswift MAILsweeper for SMTP < 4.3.20 Multiple Vulnerabilities
PVS ID: 3659 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:Not Available
Family Internet Services 944