(PVS) Signatures - Tenable Network Security

CVE-2006-3331
MyBB < 1.1.4 SQL Injection
PVS ID: 3663 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running an older version of MyBulletinBoard. The vendor has released version 1.1.4 in
order to fix a flaw. Specifically, this version of MyBB is vulnerable to a remote SQL
injection flaw. An attacker exploiting this flaw would only need to be able to send a
malformed HTTP query that contains SQL commands. Successful exploitation would result
in the attacker executing arbitrary SQL commands on the backend database server.
Solution: Upgrade to version 1.1.4 or higher.
CVE Not available
Helix RealServer < 11.1.0.801 Remote Overflow
PVS ID: 3664 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the Helix RealServer streaming media server. All versions of Helix 10.0.x and
11.0.x are vulnerable to multiple remote buffer overflows. Apparently, the application does
not properly sanitize malformed HTTP requests. An attacker exploiting this flaw would
only need to be able to send HTTP requests to the Helix server. Successful exploitation
would result in the attacker executing arbitrary code.
Solution: Upgrade to version 11.1.0.801 or higher.
Yahoo! Messenger <
CVE-2006-3276
PVS ID: 3665 FAMILY: Internet Messengers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a version of Yahoo! Messenger that is reported vulnerable to a remote overflow.
An attacker exploiting this flaw would craft a malicious message that included non-ASCII
characters. The attacker would then send the malformed message to another Yahoo!
Messenger user. When the user received the malicious message, the overflow would be
triggered and the application would crash. In addition, the remote client is vulnerable to a
flaw where remote users can initiate a browser connection by sending a malformed string to
the Yahoo! Messenger Client.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-3298
Nokia Intellisync Web Portal Detection
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 946