(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a heap overflow.\n\nThe remote host is
running Winamp, a multi-media software application. This version of Winamp is
vulnerable to multiple heap overflows. Specifically, the application fails to handle buffers
when handling 'ultravox-max' and 'Lyrics3' tags. An attacker exploiting this flaw would
need to be able to convince a user into perusing a malicious media server. Successful
exploitation would give the attacker the ability to execute code with the privileges of the
user running Winamp.
Solution: Upgrade to version 5.31 or higher.
CVE-2006-5567
Web Wiz Forums forum/search.asp KW Parameter SQL Injection
PVS ID: 3801 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is vulnerable to a SQL injection flaw in its search.asp script. An attacker exploiting this
flaw would be able to execute arbitrary commands on the remote database server.
Successful exploitation would only require that the attacker be able to send malformed
requests to the search.asp application. Successful exploitation would result in a loss of
confidentiality, integrity, and availability.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-5635
FreePBX VoIP Administrative Interface Detection
PVS ID: 3802 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the FreePBX administrative interface. FreePBX is an Asterisk
derivative that includes a Voice Over IP (VoIP) server and an administrative web interface.
The web interface is used to manage the VoIP services. The version of FreePBX is\n%L
Solution: Ensure that the default settings for the web interface have been disabled or changed. Also
ensure that only trusted IP ranges can access the service.
CVE Not available
WordPress < 2.0.5 Multiple Vulnerabilities
PVS ID: 3803 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running WordPress, a web blog manager written in PHP.\nThe remote version of this
software is reported to be vulnerable to a number of flaws. At the time of this writing, the
flaws have not been verified by the vendor. Allegedly, an attacker can exploit these flaws to
gain information about the server that would be useful in future attacks. The WordPress
application is hosted at the following location:\n%P
Family Internet Services 983