(PVS) Signatures - Tenable Network Security

CVE-2009-3231
Horde < 3.3.4 / 3.3.5 Multiple Vulnerabilities
PVS ID: 5171 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote web server contains a PHP application that is vulnerable to
multiple attack vectors.\n\nThe version of Horde, Horde Groupware, or Horde Groupware
Webmail Edition installed on the remote host is potentially affected by multiple issues :
\n\n - A vulnerability in the form library that allows the overwriting of arbitrary local files,
subject to the permissions of the web server user. This issue occurs only when the
application uses image form fields such as Turba H3 or Ansel.\n\n - Two cross-site
scripting vulnerabilities in the preference system and the MIME viewer library.\n\nFor your
information, the installed version of Horde is: \n %L
Solution: Upgrade to Horde version 3.2.5 / 3.3.5 or later.
Aria2 Detection
CVE Not available
PVS ID: 5172 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: The remote host is running aria2, a client application used to download files via a number
of protocols.
Solution: N/A
CVE Not available
nginx Webserver Detection
PVS ID: 5173 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: The remote host is running nginx web server.
Solution: N/A
CVE Not available
nginx HTTP Request Remote Buffer Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5174 FAMILY: Web Servers RISK: HIGH NESSUS ID:41608
Description: Synopsis : \n\nThe remote web server is affected by a remote buffer overflow
vulnerability.\n\nThe remote host is running a version of nginx web server that is
potentially affected by a remote buffer overflow vulnerability. Using a specially crafted
HTTP request, an attacker can cause web server to crash, or potentially run arbitrary code
subject to the privileges of the web server user.\n\nFor your information, the reported
Family Internet Services 1376