(PVS) Signatures - Tenable Network Security

SQLiX SQL Injection Tool Detection
PVS ID: 3914 FAMILY: Policy
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote host is running SQLix. SQLix is a tool that automates the
detection and exploitation of web applications that are vulnerable to SQL injection attacks.
Solution: Ensure that this application is authorized by corporate policies and guidelines.
CVE Not available
Microsoft FrontPage Version Detection
PVS ID: 3915 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: The remote web server appears to be running with FrontPage extensions. Double-check the
configuration since many problems have been found with FrontPage when the
configuration has not been secured. The reported version of FrontPage is: \n %L
Solution: If it is not required, disable FrontPage access. Otherwise, disable anonymous access to the
resource.
CVE Not available
LifeType < 1.1.6 rss.php profile Parameter Traversal Arbitrary File Access
PVS ID: 3916 FAMILY: Web Servers RISK: NONE NESSUS ID:24356
Description: Synopsis :\n\nThe remote host may allow remote disclosure of confidential files.\n\nThe
remote host is running LifeType, an open-source blogging platform. The version of
LifeType installed on the remote fails to sanitize input to the 'profile' parameter of the
'rss.php' script of directory traversal sequences. An unauthenticated remote attacker can
leverage this flaw to read files on the affected host and disclose sensitive information, such
as configuration parameters used by the application.
Solution: Upgrade to version 1.1.6, 1.2-beta2 or higher.
CVE-2007-0979
ClamAV < 0.90.0 Multiple Vulnerabilities
PVS ID: 3917 FAMILY: Web Clients
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe
remote host is running the ClamAV antivirus client version %L\n\nThis version of
ClamAV is vulnerable to a flaw where a CAB file with a reported length of zero
can cause ClamAV to crash. In addition, the ClamAV application is vulnerable to a
directory traversal flaw. An attacker, by specifying a file name which has '../' or '..\'
Family Internet Services 1014