Fix Security Vulnerabilities on server

we need a system administrator to correct a couple of simple issues on our server. Namely the two Security Vulnerabilities issues described below. This should be a simple job of appying a patch and closing a remote port on the server.
Please get in touch if you are able to complete this asap. Many thanks and Kind Regards,
Lorenzo


1. Title: vulnerable web program (OutStart Participate) Impact: A remote attacker could execute
arbitrary commands, create or overwrite files, or view files or directories on the web server. Data
Sent: GET /pe/repository/displaynavigator.jsp?rootFolder=101 HTTP/1.0 Host: www.vinopic.com
User-Agent: Mozilla/4.0 Connection: Keep-alive Data Received: And:
jQuery(document).ready(function(){ And: H.write(l()); Resolution: 03/16/05 CVE 2005-0685
The displaynavigator.jsp, renamepopup.jsp, and displaydeletenavigator.jsp programs in OutStart
Participate Enterprise are affected by vulnerabilities. By manipulating certain parameters in a
URL request, a remote attacker is able to gain unauthorized read, rename, or delete access to
certain directories. Resolution: Contact OutStart for a patch. Risk Factor: High/ CVSS2 Base
Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CVE: CVE-2005-0685 BID: 12752

2. Title: Open Microsoft SQL Server database port Synopsis: An open Microsoft SQL Server
database port was detected Impact: Open Microsoft SQL Server database port Resolution:
Disable public facing access to your Microsoft SQL Server database If you feel that you have
received this notice in error, please contact SecurityMetrics support. Risk Factor: Medium/
CVSS2 Base Score: 4.0