(PVS) Signatures - Tenable Network Security

Solution: Upgrade to JBoss EAP version 4.2.0.CP09, 4.3.0.CP08, or later.
CVE-2010-1429
MODx < 1.0.3 Multiple Vulnerabilities
PVS ID: 5522 FAMILY: CGI RISK: HIGH NESSUS ID:46183
Description: Synopsis : \n\nThe remote web server is hosting a web application that is vulnerable to
multiple attack vectors.\n\nThe remote web server is hosting MODx, a content management
system written in PHP. The installed version of MODx is earlier than 1.0.3. Such versions
are potentially affected by multiple vulnerabilities : \n\n - A cross-site scripting
vulnerability in the 'SearchHighlight' plugin. (CVE-2010-1427)\n\n - A SQL-injection
vulnerability related to WebLogin. (CVE-2010-1426)\n\nFor your information, the
observed version of MODx is: \n %L
Solution: Upgrade to MODx 1.0.3 or later.
CVE-2010-1427
Wing FTP Server < 3.4.1 Multiple Information Disclosure Vulnerabilities
PVS ID: 5523 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Wing FTP server. The installed version of Wing FTP is earlier than 3.4.1. Such
versions are potentially affected by multiple information disclosure vulnerabilities : \n\n -
Input passed to the web client is not properly sanitized before being used.\n\n - An
unspecified error when using the HTTP protocol can be exploited to disclose sensitive
information.\n\nFor your information, the observed version of Wing FTP Server is: \n %L
Solution: Upgrade to Wing FTP Server 3.4.1 or later.
CVE Not available
Wing FTP Server < 3.4.5 HTTP Request Directory Traversal
PVS ID: 5524 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a directory traversal attack.\n\nThe remote
host is running Wing FTP server. The installed version of Wing FTP is earlier than 3.4.5.
Such versions are potentially affected by a directory traversal vulnerability over the HTTP
protocol. An attacker, exploiting this flaw, could access arbitrary files on the affected
host..\n\nFor your information, the observed version of Wing FTP Server is: \n %L
Solution: Upgrade to Wing FTP Server 3.4.5 or later.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1479