(PVS) Signatures - Tenable Network Security

Tivoli Client Detection
PVS ID: 3979 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is a Tivoli client. The reported version was: \n %L
Solution: N/A
Tivoli Server Detection
CVE Not available
PVS ID: 3980 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is a Tivoli Server. The reported version was: \n %L
Solution: N/A
CVE Not available
Mambo < 4.6.2 includes/pdf.php dofreePDF Function Authentication Bypass
PVS ID: 3981 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the
bypassing of authentication.\n\nThe remote host is running the Mambo Content
Server, an application for generating dynamic content for web servers. The
remote application is vulnerable to a flaw where remote attackers can gain
access to the data hosted on the Mambo database. The root of the flaw stems
from a lack of authentication and authorization by the 'pdf.php' application. In
order to exploit this flaw, an attacker would only need to be able to send data to
the 'pdf.php' application. Successful exploitation would result in a potential loss
of confidentiality, integrity, and availability on the remote database server.
Solution: Upgrade to version 4.6.2 or higher.
CVE-2006-7202
PHP < 4.4.7 / 5.2.2 Multiple Vulnerabilities
PVS ID: 3982 FAMILY: Web Servers RISK: HIGH NESSUS ID:25159
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a version of PHP lower than 4.4.7 or 5.2.2. This version is vulnerable to a
number of remote issues. At least one of these issues is related to a buffer overflow attack.
An attacker exploiting these flaws would be able to impact confidentiality, integrity, and
availability. The reported version of PHP is: \n %L
Solution: Upgrade to version 4.4.7, 5.2.2 or higher.
CVE-2007-1001
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1032