(PVS) Signatures - Tenable Network Security

Description: The remote host is a NETBIOS workstation
Solution: N/A
CVE Not available
XML Request Possible userID / password Cleartext Remote Disclosure
PVS ID: 5214 FAMILY: Data Leakage RISK: INFO NESSUS ID:Not Available
Description: The remote XML client posted a request with what appears to be an embedded
userID and/or password. You should manually verify that confidential data is not
being leaked from the network. The observed XML request was: \n %L
Solution: Ensure that confidential data is not passed via plain text form fields.
CVE Not available
Database Client Detection
PVS ID: 5215 FAMILY: Database RISK: INFO NESSUS ID:Not Available
Description: The remote web server is running a database client
Solution: N/A
realtimeonly
CVE Not available
nginx HTTP Request Header Remote Buffer Overflow
PVS ID: 5216 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:41608
Description: Synopsis : \n\nThe remote web server is affected by a remote denial of service
vulnerability.\n\nThe remote host is running a version of nginx web server earlier than
0.5.38, 0.6.39, or 0.7.62. Such versions are potentially affected by a remote denial of
service vulnerability because the application fails to to perform adequate bounds checking
in the 'ngx_http_process_request_headers()' function of the 'src/http/ngx_http_request.c'
source file. An attacker, exploiting this flaw, can cause the web server to crash, or
potentially run arbitrary code subject to the privileges of the web server process.\n\nFor
your information, the observed version of nginx is: \n %L
Solution: Apply the patch from the vendor, or upgrade to nginx 0.5.38, 0.6.39, or 0.7.62
CVE-2009-3896
Opera < 10.01 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5217 FAMILY: Web Clients RISK: HIGH NESSUS ID:42291
Family Internet Services 1389