(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote SFTP server is affected by an authentication bypass
vulnerability.\n\nThe remote host is running Serv-U File Server, an FTP/SFTP Server for
Windows. For your information, the observed version of Serv-U is %L.\n\nVersions of
Serv-U earlier than 10.3.0.1 are potentially affected by a security bypass vulnerability in
the SFTP module. By supplying a valid username and blank password, an attacker can gain
unauthorized access to the affected application.
Solution: Upgrade to Serv-U version 10.3.0.1 or later.
CVE Not available
FileCOPA < 6.01.01 Multiple Vulnerabilities
PVS ID: 5713 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:50811
Description: Synopsis :\n\nThe remote FTP server is vulnerable to a directory traversal attack.\n\nThe
remote host is running FileCOPA, an FTP Server for Windows. For your information, the
observed version of FileCOPA is %L.\n\nVersions of FileCOPA earlier than 6.01.01 are
potentially affected by an unspecified directory traversal attack. An attacker, exploiting this
flaw, could download arbitrary files subject to the privileges of the user running the
affected application.
Solution: Upgrade to FileCOPA 6.01.01 or later.
CVE Not available
FreeNAS < 0.7.2 Revision 5543 Command Execution Vulnerability
PVS ID: 5714 FAMILY: CGI RISK: HIGH NESSUS ID:50510
Description: Synopsis :\n\nA web application on the remote host is affected by an arbitrary command
execution vulnerability.\n\nThe remote host is running FreeNAS, a network attached
storage distribution based on FreeBSD. For your information, the observed version of
FreeNAS on the remote running on the remote host is %L.\n\nVersions of FreeNAS earlier
than 0.7.2 Revision 5543 are potentially affected by a remote command execution
vulnerability because the application fails to restrict access to the 'exec_raw.php' script. A
remote, unauthenticated attacker can pass arbitrary commands through the script's 'cmd'
parameter and have them executed with root privileges.
Solution: Upgrade to FreeNAS 0.7.2 Revision 5543 or later.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Apple iPhone/iPad iOS < 4.2 Multiple Vulnerabilities
PVS ID: 5715 FAMILY: Mobile Devices RISK: HIGH NESSUS ID:Not Available
Family Internet Services 1545