(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a file-include injection flaw.\n\nThe remote
host is running the Blueshoes framework, a PHP framework for creating web applications.
This version of Blueshoes is vulnerable to a flaw in the GoogleSearch.php script. An
attacker exploiting this flaw would be able to execute arbitrary PHP code on the target
server. Successful exploitation would give the attacker the same rights as the web process.
Solution: No solution is known at this time.
CVE-2006-5250
ClamAV < 0.88.5 PE Handler Content-Parsing Overflow
PVS ID: 3794 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a heap overflow.\n\nThe remote host is
running ClamAV, an antivirus application. The remote host is running version: \n %L
\n\nThere is a remote content-parsing flaw in this version of ClamAV that could lead to a
heap overflow. An attacker sending a malformed PE file would be able to exploit this flaw.
Successful exploitation would result in the attacker executing arbitrary code.
Solution: Upgrade to version 0.88.5 or higher.
CVE-2006-5295
Skinny Server Detection
PVS ID: 3795 FAMILY: Generic RISK: INFO NESSUS ID:22877
Description: The remote server is an H.323 proxy that understands the Skinny protocol, also known as
SCCP, for 'Skinny Client Control Protocol'. Skinny is Cisco's proprietary lightweight
terminal control protocol used by some VoIP phones to communicate with Cisco
CallManager or Asterisk PBX systems.
Solution: Limit incoming traffic to this port.
CVE Not available
Opera < 9.02 Multiple Vulnerabilities
PVS ID: 3796 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:22875
Description: Synopsis :\n\nThe remote host contains a web browser that is susceptible to a heap buffer
overflow attack.\n\nThe version of Opera installed on the remote host reportedly contains a
heap buffer overflow vulnerability that can be triggered by a long link. Successful
exploitation of this issue may result in a crash of the application or even allow for
execution of arbitrary code subject to the user's privileges.
Solution: Upgrade to version 9.02 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 981