(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote IMAP server is affected by a buffer overflow
vulnerability.\n\nThe remote host is running Ipswitch IMail Server, a commercial
messaging and collaboration software product for Windows. According to its banner, the
version of Ipswitch installed on the remote host has a buffer overflow issue in its SMTP
server component. The details of the exploit are not currently known. An attacker
exploiting this flaw would send a malformed SMTP command to the server. Successful
exploitation would result in arbitrary code being executed.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-4379
HP OpenView BBC Service Detection
PVS ID: 3739 FAMILY: CGI RISK: INFO NESSUS ID:22318
Description: The remote host appears to be running one of the HP OpenView products. This
specific service is an HTTP server. By sending special requests (version, info, status,
ping, services), it is possible to obtain information about the remote host. The
reported server version is: \n %L
Solution: Ensure that this server is configured in accordance with corporate policies and procedures.
CVE Not available
RaidenHTTPD SoftParserFileXml Parameter Remote File Inclusion
PVS ID: 3740 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:22317
Description: The remote web server contains a PHP script that is susceptible to a remote file inclusion
attack. The remote host is running RaidenHTTPD, a web server for Windows. The version
of RaidenHTTPD on the remote host fails to sanitize user-supplied input to the
'SoftParserFileXml' of the '/raidenhttpd-admin/slice/check.php' script before using it to
include PHP code. An unauthenticated attacker may be able to exploit this issue to view
arbitrary files or to execute arbitrary PHP code on the remote host, subject to the privileges
of the user under which the application runs, which is LOCAL SYSTEM by default.
Solution: No solution is known at this time.
CVE-2006-4723
Quicktime < 7.1.3 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3741 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote version of QuickTime is affected by multiple code execution
vulnerabilities.\n\nThe remote version of Quicktime is vulnerable to various buffer
overflows involving specially-crafted media files. An attacker may be able to leverage
these issues to execute arbitrary code on the remote host by sending a malformed file to a
victim and having them open it using QuickTime player.
Family Internet Services 966