(PVS) Signatures - Tenable Network Security

Solution: N/A
CVE Not available
cPanel Remote Backup Information Disclosure
PVS ID: 4107 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a version of cPanel that is either 10.9.1 or 11.4.19.\nThe remote version of this
software is vulnerable to a cross-site scripting (XSS) flaw in the 'scgiwrap' script. An
attacker exploiting this flaw would need to be able to convince a user to browse a malicious
URI. In addition, this version of cPanel is vulnerable to a path disclosure flaw. Successful
exploitation would result in the attacker gaining knowledge of the physical location of the
different web files.
Solution: Upgrade or patch according to vendor recommednations.
CVE-2007-3367
Ubuntu Server Detection
PVS ID: 4108 FAMILY: Operating System Detection RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the Ubuntu operating system. This information was gathered via
the web server banner that looked like: \n %L
Solution: Upgrade to the latest version of Ubuntu.
CVE Not available
CFNetwork < 129.20 DoS
PVS ID: 4109 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running CFNetwork prior to 129.20. CFNetwork is an API for Mac OS X
users that allows an abstraction of common network protocols. This version of CFNetwork
is prone to a Denial of Service (DoS) flaw. An attacker exploiting this flaw would be able
to crash the application utilizing CFNetwork. The reported version of CFNetwork is: \n %L
Solution: Upgrade to version 129.20 or higher.
CVE-2007-0464
Limewire Server Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4110 FAMILY: Peer-To-Peer File Sharing
RISK:
MEDIUM
NESSUS ID:Not Available
Family Internet Services 1066