(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 10.0.2 or higher.
CVE-2008-6967
vBulletin < 3.7.4 Visitor Messages Add-on HTML Injection
PVS ID: 4766 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to an HTML injection attack.\n\nThe version
of vBulletin installed on the remote host fails to properly sanitize user-supplied input.
Specifically, the 'Visitor Messages' addon can be used by an attacker to inject script code
into a public section of the bulletin board. An attacker exploiting this flaw would only need
the ability to post data to the server. When an unsuspecting user browses the site, the script
code would be executed within the client browser. The reported version of vBulletin is: \n
%L
Solution: Upgrade to version 3.7.4 or higher.
MyBB < 1.4.4 CSRF
CVE Not available
PVS ID: 4767 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a cross-site request forgery (CSRF)
attack.\n\nThe version of MyBB installed on the remote host is vulnerable to an
information-disclosure flaw. Specifically, the 'my_post_key' variable of the
'moderation.php' script can be harvested by malicious third party sites. An attacker can use
this information to generate cross-site request forgery (CSRF) attacks. The reported version
of MyBB is: \n %L \n
Solution: Upgrade to version 1.4.4 or higher.
CVE-2008-7082
Apple Error Reporting DNS Lookup
PVS ID: 4768 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is an Apple computer. PVS just observed the host making a query to
an Apple server that handles error reports.
Solution: N/A
CVE Not available
Apple iPhone Web Utility Detection
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1255