(PVS) Signatures - Tenable Network Security

TurboFTP 'DELE' FTP Command Remote Buffer Overflow
PVS ID: 5300 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:43877
Description: Synopsis : \n\nThe remote FTP server is vulnerable to a remote denial of service
attack.\n\nThe remote host is running the TurboFTP FTP server. The installed version of
TurboFTP is earlier than 1.00.720. Such versions are potentially affected by a remote
buffer overflow vulnerability when handling an overly large string that is passed to the
'DELE' FTP command. An attacker, exploiting this flaw, could crash the affected service.
For your information, the observed version of TurboFTP is: \n %L
Solution: Upgrade to TurboFTP 1.00.720
CVE Not available
Zope 'standard_error_message' Cross-Site Scripting Vulnerability
PVS ID: 5301 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote web server is hosting an application that is vulnerable to a
cross-site scripting attack.\n\nThe remote Zope server is vulnerable to a cross-site scripting
flaw related to the 'standard_error_message' template. An attacker, exploiting this flaw,
could execute arbitrary script code in a user's browser. For your information, the observed
version of Zope server is: \n %L
Solution: Upgrade to Zope 2.8.12, 2.9.12, 2.10.22, 2.11.6, 2.12.3, or later.
CVE-2010-1104
DokuWiki < DokuWiki Release 2009-12-25 Multiple Vulnerabilities
PVS ID: 5302 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:44059
Description: Synopsis : \n\nThe remote web server is hosting an application that is vulnerable to
multiple attack vectors.\n\nThe remote web server is hosting a release of DokuWiki earlier
than DokuWiki 2009-12-25. Such versions are potentially affected by multiple
vulnerabilities : \n\n - A security-bypass vulnerability that can be exploited through the
'cmd[save]', 'cmd[del]', and 'cmd[update]' parameters of the 'lib/plugins/acl/ajax.php'
script.\n\n - An information-disclosure vulnerability in the 'ns' parameter of the 'ajax.php'
script.\n\nFor your information, the observed version of DokuWiki is: \n %L
Solution: Upgrade to DokuWiki Release 2009-12-25 or later.
CVE-2010-0288
Passive Vulnerability Scanner (PVS) Signatures
Sun Java System Identity Manager 8.1 Privilege Escalation Vulnerability
PVS ID: 5303 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Family Internet Services 1417