(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote web server is hosting a web application that is affected by a
security-bypass vulnerability.\n\nThe remote web server is hosting Centreon, a PHP-based
application for monitoring networks.\n\nThe installed version of Centreon is earlier than
2.1.4. Such versions are potentially affected by a security-bypass vulnerability which would
allow an attacker to gain access to functionality such as ping or traceroute and access to
LDAP import information. For your information, the observed version of Centreon is: \n
%L
Solution: Upgrade to Centreon 2.1.4 or later.
CVE-2009-4368
phpLDAPadmin < 1.2 Local File Inclusion
PVS ID: 5291 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:43402
Description: Synopsis : \n\nThe remote web server is hosting an application that is vulnerable to a local
file inclusion attack.\n\nThe remote web server is hosting phpLDAPadmin, a web-based
LDAP client. The installed version of phpLDAPadmin is earlier than 1.2.0. Such versions
are potentially affected by a local file inclusion vulnerability because the application fails to
properly sanitize user-supplied input to the 'cmd' parameter of the 'cmd.php' script. An
unauthenticated user could exploit this flaw to view arbitrary files or possibly execute
arbitrary PHP code on the remote host subject to the privileges of the web server user id.
For your information, the observed version of phpLDAPadmin is : \n %L
Solution: Upgrade to phpLDAPadmin 1.2.0 or later.
CVE-2009-4427
Transmission Client Detection
PVS ID: 5292 FAMILY: Peer-To-Peer File Sharing
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software which should be authorized with respect
to Corporate policy.\n\nThe remote host is running the Transmission client version
%L\nTransmission is a client application which allows users to quickly download files
from multiple locations over the BitTorrent protocol.
Solution: Ensure that Transmission is allowed with respect to Corporate policies and guidelines.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Sendmail < 8.14.4 SSL Certificate NULL Character Spoofing
PVS ID: 5293 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:43637
Family Internet Services 1414