(PVS) Signatures - Tenable Network Security

Description: The remote host is running a version of PHP which is older than 4.3.2. This version
contains various flaws that may allow an attacker who has the ability to execute PHP
scripts in safe_mode on this host to execute arbitrary commands with the privileges of the
HTTP daemon
Solution: Upgrade to PHP 4.3.2 or higher.
CVE-2003-0172
PHP < 4.1.2 POST Request file_upload Overflow
PVS ID: 1485 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: The remote host is running a version of PHP which is older than 4.1.2. This version
contains a bug which the handling functions of data of type multipart/form-data, which may
allow an attacker to gain a shell on this host.
Solution: Upgrade to PHP 4.1.2 or higher.
CVE-2002-0081
RemotelyAnywhere Web Server Detection
PVS ID: 1486 FAMILY: Web Servers RISK: LOW NESSUS ID:10920
Description: The remote host is running the RemotelyAnywhere web server. RemotelyAnywhere allows
a user to remotely control the server. You should ensure that this service is authorized by
the appropriate groups and relevant security policies.
Solution: Ensure that this server was legitimately installed.
CVE Not available
Alibaba 2.0 HTTP Request Overflow DoS
PVS ID: 1487 FAMILY: Web Servers RISK: HIGH NESSUS ID:10012
Description: It is possible to disable the remote AliBaba web server by sending a long argument to a
GET or POST HTTP request.
Solution: None at this time.
CVE-2000-0626
Apache < 1.3.27 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 1488 FAMILY: Web Servers RISK: HIGH NESSUS ID:11137
Family Internet Services 383