(PVS) Signatures - Tenable Network Security

'CON:') when using the STOU command provided he has write access to a directory.\n - An
authenticated remote attacker can overwrite or create arbitrary files via a directory traversal
attack in theRNTO command.\n - An authenticated remote attacker may be able to upload a
file to the current Windows directory with rename by placing the destination in '\' (ie, 'My
Computer').
Solution: Upgrade to version 7.3.0.1 or higher.
CVE-2008-4501
Blue Coat Reporter Detection
PVS ID: 4700 FAMILY: Web Servers RISK: INFO NESSUS ID:34334
Description: Synopsis : \n\nThe remote web server is used to monitor web traffic.\n\nThe remote host is
running Blue Coat Reporter, a web reporting system for monitoring centralized logs from
Blue Coat appliances. This web service is used to access the application. The reported
version is: \n %L
Solution: Filter incoming traffic to this port if desired.
CVE Not available
Blue Coat Reporter Default admin Credentials
PVS ID: 4701 FAMILY: Web Servers RISK: HIGH NESSUS ID:34346
Description: Synopsis :\n\nThe administrative password for the remote web service can be
guessed.\n\nThe remote Blue Coat Reporter is using the default credentials of 'admin' for
both the username and password.
Solution: Change the admin password.
CVE Not available
OpenNMS Server Detection
PVS ID: 4702 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server is used to monitor network devices.\n\nThe remote
host is running OpenNMS, an open source network management application. This web
interface is used to manage the server.
Solution: Filter incoming traffic to this port if desired.
CVE Not available
Simple Machines Forum < 1.1.7 Incomplete BBcode Block Security Bypass
PVS ID: 4703 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Family Internet Services 1235