(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 9.4.0 or higher.
CVE-2008-5734
OneOrZero Helpdesk tinfo.php Arbitrary File Upload
PVS ID: 4801 FAMILY: CGI RISK: HIGH NESSUS ID:35261
Description: Synopsis : \n\nThe remote web server contains a PHP application that is affected by an
arbitrary file upload vulnerability.\n\nThe remote host is running OneOrZero Helpdesk, a
web-based helpdesk application written in PHP. The version of OneOrZero HelpDesk
installed on the remote host allows uploads of arbitrary files via the 'tinfo.php' script
provided the 'send_email' POST parameter is set. By uploading a file with arbitrary PHP
code, an unauthenticated remote attacker can likely leverage this issue to execute code
subject to the privileges of the web server user ID. In addition, there is a flaw in the
login.php script when handling the 'default_language' parameter. An attacker would be able
to view or execute arbitrary local files. Note that successful exploitation of this issue
requires that 'Task Attachments' is enabled, which is true by default. Further, note that there
is also reportedly a SQL injection issue involving the Content_Type for uploaded files and
affecting this version of OneOrZero Helpdesk. If "Task Attachments' have been disabled,
you are not vulnerable to this flaw.\n\nThe reported version of OneOrZero is: \n %L
Solution: Log into the application's control panel as the administrator and disable 'Task Attachments'
(under 'OneOrZero Settings'). When released, upgrade to version 1.6.5.8 or higher.
CVE-2009-0886
SPIP Version Detection
PVS ID: 4802 FAMILY: CGI RISK: INFO NESSUS ID:Not Available
Description: The remote host is running SPIP, an application used to rapidly create web content. The
version of SPIP is: \n %L
Solution: N/A
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
SSL Certificate Signed Using Weak Hashing Algorithm
PVS ID: 4803 FAMILY: Generic RISK: LOW NESSUS ID:35291
Description: Synopsis :\n\nThe SSL certificate has been signed using a weak hash algorithm -
MD5\n\nThe remote service uses an SSL certificate that has been signed using a
cryptographically weak hashing algorithm - MD5. These algorithms are known to be
vulnerable to collision attacks. In theory, a determined attacker may be able to leverage this
weakness to generate another certificate with the same digital signature, which could allow
him to masquerade as the affected service.
Solution: Contact the Certificate Authority to have the certificate reissued.
Family Internet Services 1267