(PVS) Signatures - Tenable Network Security

Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-3639
MySQL MERGE Table Privilege Escalation
PVS ID: 3697 FAMILY: Database RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nAccording to its version number, the installation of MySQL on
the remote host may be prone to a flaw where an authenticated user can escalate privileges
on the remote database server. Specifically, even if a user has had access revoked to a
certain table, they may be able to access it from another table. Successful exploitation
would lead to a loss of confidential data.
Solution: Upgrade to version 4.1.21, 5.0.24 or higher.
CVE-2006-4031
IBM DB2 Version Detection
PVS ID: 3698 FAMILY: Database RISK: INFO NESSUS ID:Not Available
Description: The remote host is running IBM DB2 database version %L.
Solution: N/A
CVE Not available
Hobbit Monitor < 4.1.2p2 config Command Traversal Arbitrary File Access
PVS ID: 3699 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Directory Traversal flaw.\n\nThe remote
host is running Hobbit Monitor, a web-based host/network monitoring software. This
version of Hobbit Monitor is prone to a flaw where remote attackers can use the 'config'
command to access confidential files. To exploit this issue, the attacker would connect to
the Hobbit application (typically on port 1984) and send a 'config ../../../../../'
request. Successful exploitation would result in the attacker gaining access to confidential
data.
Solution: Upgrade to version 4.1.2p2 or higher.
CVE-2006-4003
Yahoo! Messenger < 8.0.0.863 File Extension Spoofing
PVS ID: 3700 FAMILY: Internet Messengers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Family Internet Services 956