(PVS) Signatures - Tenable Network Security

CVE Not available
Xerox WorkCentre Multiple Vulnerabilities
PVS ID: 3834 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is a Xerox WorkCentre. The exact version of the installed software is %L\nThis version of
WorkCentre is vulnerable to a number of flaws. Namely\n 1) There are multiple command
injection flaws that would allow an anonymous user to execute commands with the
privileges of the WorkCentre Administrator.\n 2) Administrative bypass within the
TFTP/BOOTP auto configuration options. This flaw would allow an attacker to make
configuration changes that would impact the availability of the remote printer\n 3) A flaw
that would allow an attacker to hijack email messages and insert malicious code into the
body of the message\n 4) A flaw within the 'scan-to-mailbox' function that would allow an
attacker to retrieve sensitive files\n 5) A flaw that would allow an attacker to switch to the
HTTP protocol instead of the HTTPS protocol
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-6432
Serendipity serendipity[charset] Parameter Local File Inclusion
PVS ID: 3835 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:23752
Description: Synopsis :\n\nThe remote web server contains a PHP application that is affected by
multiple local file inclusion issues.\n\nSeveral scripts included with the version of
Serendipity installed on the remote host fail to sanitize input to the 'serendipity[charset]'
parameter before using it to include PHP code. Provided PHP's 'register_globals' setting is
enabled, an unauthenticated attacker may be able to exploit these issues to view arbitrary
files or to execute arbitrary PHP code on the remote host, subject to the privileges of the
web server user IS.
Solution: No solution is known at this time.
CVE-2006-6242
TNFTPD < 20040811 Globbing Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3836 FAMILY: FTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running TNFTPD, a port of the NetBSD FTP daemon. This version of TNFTPD is
vulnerable to a remote buffer overflow. The flaw is within the glob.c function. An attacker
exploiting this flaw would need to authenticate to the server and then pass a malformed
string that would be interpreted by the glob function. Successful exploitation results in the
attacker executing arbitrary code on the remote system.
Family Internet Services 992