(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the
bypassing of authentication.\n\nThe remote host is running OpenCms, an
open-source content management system. This version of OpenCms ( %L ) is
vulnerable to a remote flaw where attackers can bypass authentication and gain
administrative access to accounts and confidential data. An attacker exploiting
this flaw would just need to have knowledge of where administrative forms are
stored within the web directory (trivial to find). Successful exploitation leads to
the user gaining administrative access to the application.
Solution: Upgrade to version 6.2.2 or higher.
CVE Not available
Mozilla Thunderbird < 1.5.0.5 Multiple Vulnerabilities
PVS ID: 3694 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:22096
Description: The remote Windows host contains a mail client that is affected by multiple vulnerabilities.
The remote version of Mozilla Thunderbird suffers from various security issues, at least
one of which may lead to execution of arbitrary code on the affected host subject to the
user's privileges.
Solution: Upgrade to version 1.5.0.5 or higher.
CVE-2006-3811
Firefox < 1.5.0.5 Multiple Vulnerabilities
PVS ID: 3695 FAMILY: Web Clients RISK: HIGH NESSUS ID:22095
Description: Synopsis :\n\nThe remote Windows host contains a web browser that is affected by
multiple vulnerabilities.\n\nThe installed version of Firefox is affected by various security
issues, some of which may lead to execution of arbitrary code on the affected host subject
to the user's privileges.
Solution: Upgrade to version 1.5.0.5 or higher.
Help Center Live <
CVE-2006-3812
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3696 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Directory Traversal flaw.\n\nThe remote
web server is running Help Center Live, a help desk application written in PHP. The remote
version of this software is vulnerable to a Directory Traversal flaw. An attacker exploiting
this flaw would send a malformed HTTP request which included '../' (or similar) directory
traversal strings. Successful exploitation would result in the attacker gaining access to
confidential data.
Family Internet Services 955