(PVS) Signatures - Tenable Network Security

PVS ID: 4576 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: The remote host is a trixbox Voice-over-IP (VoIP) administration server. The reported
version number is: \n %L
Solution: Ensure that this service can only be accessed by trusted machines.
CVE Not available
trixbox Dashboard user/index.php langChoice Parameter Local File Inclusion
PVS ID: 4577 FAMILY: Web Servers RISK: HIGH NESSUS ID:33445
Description: Synopsis :\n\nThe remote web server contains a PHP script that is susceptible to a local file
inclusion attack.\n\nThe remote host is running trixbox dashboard, a PHP-based front-end
for trixbox, an IP-PBX software solution. The version of trixbox dashboard installed on the
remote host fails to sanitize user-supplied input to the 'langChoice' parameter of the
'user/index.php' script before using it to include PHP code. Regardless of PHP's
'register_globals' setting, an unauthenticated attacker may be able to leverage this issue to
view arbitrary files or to execute arbitrary PHP code on the remote host, subject to the
privileges of the web server user ID.
Solution: No solution is known at this time.
CVE-2008-6825
ISC BIND DNS Query ID Field Prediction Cache Poisoning
PVS ID: 4578 FAMILY: DNS Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote DNS server is vulnerable to a cache-poisoning attack.\n\nThe
remote host is running a version of BIND DNS server which fails to randomize the UDP
source port. This could allow an attacker to poison the DNS cache. A poisoned cache
means that DNS clients can be directed to rogue sites and greatly simplifies phishing
attacks. The reported version of BIND is: \n %L \nIAVA Reference : 2008-A-0045\nSTIG
Finding Severity : Category I
Solution: Many vendors build their DNS solution on top of BIND. Contact your specific DNS vendor
for a fix. While the only true fix is to use DNSSEC, ISC has released patched versions of
BIND that make it harder for attackers to spoof DNS answers. This is accomplished by
expanding the range of UDP ports from which queries are sent. The following versions of
ISC BIND increase the range of utilized UDP ports: 9.5.0-P1, 9.5.1b1, 9.4.2-P1, 9.4.3b2,
9.3.5-P1
CVE-2008-1447
Apache < 2.2.9 Multiple Vulnerabilities
PVS ID: 4579 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:33477
Family Internet Services 1197