(PVS) Signatures - Tenable Network Security

RISK:
MEDIUM
Description: Synopsis :\n\nThe remote SFTP service is vulnerable to a directory traversal attack.\n\nThe
remote host is running XLight FTP server with the SFTP service enabled. For your
information, the observed version of XLight SFTP is %L.\n\nVersions of XLight FTP
server 3.x earlier than 3.6.0 are potentially affected by a directory traversal vulnerability in
the SFTP service. A remote authenticated attacker, exploiting this flaw, can read arbitrary
files on the affected host.
Solution: Upgrade to XLight FTP Server 3.6 or later.
CVE-2010-2695
Bugzilla 3.7.x < 3.7.2 Information Disclosure Vulnerability
PVS ID: 5594 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:47748
Description: Synopsis :\n\nThe remote web server is hosting an application that is affected by an
information disclosure vulnerability.\n\nThe remote web server is hosting Bugzilla, a
web-based bug tracking application. For your information, the observed version of Bugzilla
is %L.\n\nVersions of Bugzilla 3.7.x earlier than 3.7.2 fail to restrict access to bugs created
with the inboud email interface (email_in.pl) or with the 'Bug.create' method in the
WebServices interface to the 'mandatory; or 'Default' groups. This could allow bug
information to become publicly available instead of being restricted to certain groups.
Solution: Upgrade to Bugzilla 3.7.2 or later.
CVE Not available
Database Client Login Detection
PVS ID: 5595 FAMILY: Database RISK: INFO NESSUS ID:Not Available
Description: The remote client is logging in with the following credentials
Solution: N/A
realtimeonly
CVE Not available
Database Client Login Detection
PVS ID: 5596 FAMILY: Database RISK: INFO NESSUS ID:Not Available
Description: The remote client is logging in with the following credentials
realtimeonly
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1502