(PVS) Signatures - Tenable Network Security

PVS ID: 4621 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:33866
Description: Synopsis :\n\nThe remote web server is prone to a directory traversal attack.\n\nThe version
of Apache Tomcat installed on the remote host is affected by a directory traversal issue. By
encoding directory traversal sequences as UTF-8 in a request, an unauthenticated remote
attacker can leverage this issue to view arbitrary files on the remote host. Note that
successful exploitation requires that a context be configured with 'allowLinking' set to 'true'
and the connector with 'URIEncoding' set to 'UTF-8', neither of which is a default setting.
Solution: Upgrade to version 6.0.18 or higher.
CVE-2008-2938
Grendel Web Application Scanner Detection
PVS ID: 4622 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote host is running the Grendel web application scanner.
Grendel is an attack framework that allows users to automatically scan and fuzz web
application servers.
Solution: Ensure that this application is authorized according to corporate policies and guidelines.
CVE Not available
JBoss EAP < 4.2.0.CP03 / 4.3.0.CP01 Status Servlet Information Disclosure
PVS ID: 4623 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:33869
Description: Synopsis :\n\nThe remote web server contains a servlet that is affected by an information
disclosure vulnerability.\n\nThe version of JBoss Enterprise Application Platform (EAP)
running on the remote host allows unauthenticated access to the status servlet, which is
used to monitor sessions and requests sent to the server.
Solution: Upgrade to version 4.2.0.CP03 / 4.3.0.CP01 or higher.
CVE-2008-3273
Passive Vulnerability Scanner (PVS) Signatures
HP-UX ftpd Remote Privileged Access Authentication Bypass
PVS ID: 4624 FAMILY: FTP Servers RISK: HIGH NESSUS ID:33899
Description: Synopsis :\n\nThe remote FTP server may allow remote privileged access.\n\nAccording to
its banner, the version of the HP-UX FTP server running on the remote host is at a patch
level before PHNE_38458. Such versions reportedly contain an unspecified vulnerability
that in certain account configurations could be exploited by an anonymous remote attacker
to gain privileged access.\nIAVT Reference : 2008-T-0045\nSTIG Finding Severity :
Category I
Family Internet Services 1211