(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is configured with default or easily-guessed
credentials.\n\nThe remote host is running a web server with the default login and
password set to admin/NULL\nThe affected web application is:\n%P
Solution: Change default passwords.
CVE Not available
Allied Telesyn AT-8024(GB) Default Password
PVS ID: 4833 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is configured with default or easily-guessed
credentials.\n\nThe remote host is running a Allied Telesyn AT-8024(GB) server with the
default login and password set ('manager'/'admin').\nThe affected web application is:\n%P
Solution: Change default passwords.
GigaTribe Detection
CVE Not available
PVS ID: 4834 FAMILY: Web Servers RISK: INFO NESSUS ID:35468
Description: Synopsis :\n\nThe remote web server appears to be used for peer-to-peer file
sharing.\n\nAccording to its banner, the remote web server is from GigaTribe, a private
peer-to-peer file sharing application. The reported version number is: %L
Solution: Ensure that use of this software is compliant with your organization's acceptable use and
security policies.
CVE Not available
Horde < 3.3.3 / 3.2.4 Horde_Image::factory driver Argument Local File Inclusion
PVS ID: 4835 FAMILY: CGI RISK: HIGH NESSUS ID:35554
Description: Synopsis : \n\nThe remote web server contains a PHP application that is susceptible to a
local file inclusion attack.\n\nThe version of Horde, Horde Groupware, or Horde
Groupware Webmail Edition installed on the remote host fails to filter input to the 'driver'
argument of the 'Horde_Image: : factory' method before using it to include PHP code in
'lib/Horde/Image.php'. Regardless of PHP's 'register_globals' and 'magic_quotes_gpc'
settings, an unauthenticated attacker can exploit this issue to view arbitrary files or possibly
to execute arbitrary PHP code on the remote host, subject to the privileges of the web
server user ID.\n\n Note that this install is also likely affected by a cross-site scripting issue
in the 'services/portal/cloud_search.php' script. The reported version of Horde is: \n %L
Solution: Upgrade to version 3.3.3 / 3.2.4 or higher.
CVE-2009-0932
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1276