(PVS) Signatures - Tenable Network Security

ListManager words Parameter Cross-Site Scripting Vulnerability
PVS ID: 4549 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:33219
Description: Synopsis :\n\nThe remote web server is affected by a cross-site scripting
vulnerability.\n\nThe remote host is running ListManager, a web-based commercial mailing
list management application from Lyris. The version of ListManager installed on the
remote host fails to sanitize user input to the 'words' parameter of the 'read/search/results'
script before including it in dynamic HTML output. An attacker may be able to leverage
this issue to inject arbitrary HTML and script code into a user's browser to be executed
within the security context of the affected site.
Solution: Upgrade to ListManager greater than 9.3d
CVE-2008-2923
JXTA P2P Server Detection
PVS ID: 4550 FAMILY: Peer-To-Peer File Sharing
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software which should be authorized with respect
to Corporate policy\n\nThe remote host is running the JXTA Server\nJXTA is a P2P
application which allows users to quickly download files from multiple locations.
Solution: Ensure that JXTA is allowed with respect to Corporate policies and guidelines.
CVE Not available
JXTA P2P Client Detection
PVS ID: 4551 FAMILY: Peer-To-Peer File Sharing
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote host is running the JXTA Client.\nJXTA is a P2P
application that allows users to quickly download files from multiple locations.
Solution: Ensure that JXTA is allowed according to corporate policies and guidelines.
CVE Not available
Sun Java Calendar Version Detection
PVS ID: 4552 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: The remote host is running Sun Java Calendar version: \n %L
Solution: N/A
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1189