(PVS) Signatures - Tenable Network Security

PHP < 4.4.4 / 5.1.4 Multiple Vulnerabilities
PVS ID: 3732 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a version of PHP that is older than 4.4.4 or 5.1.5. This version is reported
vulnerable to several flaws that may allow an attacker with the right to execute PHP scripts
the ability to execute arbitrary code. Executed code would be run with the permissions of
the web server process.
Solution: Upgrade to version 4.4.4, 5.1.5 or higher.
WFTPD <
CVE-2006-4486
PVS ID: 3733 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote WFTP
server vulnerable to a remote buffer overflow. The server allegedly does not properly parse
and verify input to the 'CWD', 'DELE', 'APPE', 'MDTM', 'MKD', 'RMD', 'MLST', 'RNFR',
'SIZE', 'XCWD', 'XMKD', and XRMD commands. An attacker exploiting this flaw would
need to be able to authenticate to the FTP server. Successful exploitation would result in
the attacker executing arbitrary code on the WFTP server.
Solution: No solution is known at this time.
CVE-2006-5826
ALT-N MDaemon POP Server < 9.06 USER / APOP Command Overflow
PVS ID: 3734 FAMILY: POP Server
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nA buffer overflow
vulnerability has been reported for MDaemon. The vulnerability is due to inadequate
bounds checking one some POP server commands. Namely, 'USER' and 'APOP'. An
attacker can exploit this vulnerability by submitting a very large values to these commands
on the POP server. This will cause the MDaemon service to crash when attempting to
process the command. Successful exploitation would lead to the attacker executing
arbitrary code on the remote server.
Solution: Upgrade to version 9.06 or higher.
CVE-2006-4364
phpCOIN < 1.2.4 Multiple Script _CCFG[_PKG_PATH_INCL] Parameter Remote File Inclusion
PVS ID: 3735 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Family Internet Services 964