(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 7.0.302.000 or higher.
CVE-2007-2467
Lighttpd < 1.4.14 Multiple DoS
PVS ID: 3969 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Lighttpd, a small web server. This version of Lighttpd is vulnerable
to multiple Denial of Service (DoS) flaws. An attacker exploiting these flaws would only
need to be able to send data to the web server. Successful exploitation would result in the
attacker crashing the web server.
Solution: Upgrade to version 1.4.14 or higher.
CVE-2007-1869
ProFTPD < 1.3.0rc4 Multiple Modules Authentication Bypass
PVS ID: 3970 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is using ProFTPD, a free FTP server for Unix and
Linux. According to its banner, the version of ProFTPD installed on the remote host suffers
from a flaw where a user can bypass access controls. An attacker exploiting this flaw would
need the ability to authenticate to the server. Successful exploitation would result in the
attacker elevating privileges or accessing confidential data. The observed banner was: \n
%L
Solution: Upgrade to version 1.3.0rc4 or higher.
CVE-2007-2165
GroupWise < 7.0.0 SP2 WebAccess GWINTER.exe Base64 Decoding Overflow
PVS ID: 3971 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of GroupWise WebAccess from Novell that fails to sanitize HTTP
authentication requests. An overly long request will generate an overflow on the remote
WebAccess server. An attacker exploiting this flaw would only need to be able to connect
to the service and send an HTTP basic authentication request. Successful exploitation
would result in the attacker executing arbitrary code.
Solution: Upgrade to version 7.0.0 SP2 or higher.
CVE-2007-2171
Tivoli Provisioning Manager Detection
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1029