(PVS) Signatures - Tenable Network Security

CVE Not available
Kerio MailServer / Connect < 7.0.1 Administration Console File Disclosure and File Corruption
Vulnerability
PVS ID: 5561 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:47140
Description: Synopsis :\n\nThe remote mail server is vulnerable to a file disclosure and corruption
vulnerability.\n\nFor your information, the observed version of Kerio Mail Server /
Connect is %L.\n\nVersions of Kerio Mail Server / Connect earlier than 7.0.1 are
potentially affected by a file disclosure and corruption vulnerability. An attacker, with full
administrative rights, can modify the administrative console to change the product
configuration to read or corrupt arbitrary files on the server.
Solution: Upgrade to Kerio Connect 7.0.1 or later.
CVE Not available
nginx 8.3 Filename Alias Request Access Rules / Authentication Bypass
PVS ID: 5562 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw which allows attackers to retrieve
sensitive files or data\n\nFor your information, the observed version of nginx is
%L.\n\nVersions of nginx earlier than 0.7.65 are potentially affected by a security bypass
vulnerability. By appending %20 to a requested file, an attacker can view the source code
of potentially sensitive scripts.
Solution: Upgrade to nginx 0.7.65 or later.
CVE Not available
OpenSSL Version Detection
PVS ID: 5563 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: N/A
Solution: N/A
CVE Not available
OpenOffice < 3.2.1 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5564 FAMILY: Generic RISK: HIGH NESSUS ID:46814
Family Internet Services 1490