(PVS) Signatures - Tenable Network Security

Description: The remote server is running Microsoft Outlook Web Access (OWA) version : '%P'
Solution: Ensure that this instance of Outlook Web Access is within corporate standards and is
fully patched.
CVE Not available
RunCMS include/common.php xoopsOption Parameter Local File Inclusion
PVS ID: 4295 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:28291
Description: The remote web server contains a PHP application that is susceptible to a local file
inclusion attack. The remote host appears to be running RunCMS, a content-management
system written in PHP. The version of RunCMS installed on the remote host fails to
sanitize user input to the 'xoopsOption[pagetype]' parameter before using it to include PHP
code in 'include/common.php'. Regardless of PHP's 'register_globals' setting, an
unauthenticated remote attacker may be able to exploit this issue to view arbitrary files or
to execute arbitrary PHP code on the remote host, subject to the privileges of the web
server user ID.
Solution: No solution is known at this time.
CVE-2008-0224
Firefox < 2.0.0.10 Multiple Vulnerabilities
PVS ID: 4296 FAMILY: Web Clients RISK: HIGH NESSUS ID:28329
Description: Synopsis :\n\nThe remote Windows host contains a web browser that is affected by
multiple vulnerabilities.\n\n The installed version of Firefox is affected by various security
issues :\n\n - Three bugs that can result in crashes with traces of memory corruption\n - A
cross-site scripting vulnerability involving support for the 'jar:' URI scheme\n - A timing
issue when setting the 'window.location' property that could be leveraged to conduct
cross-site request forgery attacks.
Solution: Upgrade to version 2.0.0.10 or higher.
CVE-2007-5960
Sentinel Protection Server < 7.4.1 Directory Traversal File Access
PVS ID: 4297 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a directory traversal flaw.\n\nThe remote
host is running a the Sentinel Protection Server version %L.\nThis version of Sentinel is
vulnerable to a flaw where specially formatted HTTP requests, like 'GET
/..\..\..\..\..\..\winnt\win.ini', will cause the server to return potentially confidential data from
outside of the web directories.
Family Internet Services 1118