(PVS) Signatures - Tenable Network Security

PVS ID: 1509 FAMILY: Web Servers RISK: HIGH NESSUS ID:11303
Description: The remote Apache server is running mod_frontpage. Versions older than 1.6.1 are
vulnerable to a buffer overflow which may allow an attacker to gain root access on this
host. *** Note that it is not possible to remotely determine the version of mod_frontpage
which is running, so this may be a false positive.
Solution: Upgrade to mod_frontpage 1.6.1 or higher.
CVE-2002-0427
Apache mod_jk < 1.2.1 Chunked Encoding DoS
PVS ID: 1510 FAMILY: Web Servers RISK: HIGH NESSUS ID:11519
Description: The remote Apache server is running a version of mod_jk which is vulnerable in the way it
processes chunked encoded requests. This may allow an attacker to desynchronise Apache
and Tomcat which would prevent this host from running properly.
Solution: Upgrade to mod_jk 1.2.1 or higher.
CVE-2002-2272
Apache mod_python < 2.7.8 Imported Function Access
PVS ID: 1511 FAMILY: Web Servers RISK: HIGH NESSUS ID:10947
Description: The remote Apache server is running a version of mod_python which is older than 2.7.6.
This version contains a bug which may allow an attacker to execute potentially harmful
python function even though he should not have the privileges to do so.
Solution: Upgrade to mod_python 2.7.8 or higher.
CVE-2002-0185
Apache mod_ssl < 2.8.10 Off-by-one Overflow
PVS ID: 1512 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:11039
Description: The remote Apache server is running a version of mod_ssl which contains a off-by-one
buffer overflow. An attacker with write access to a .htacess file could exploit this bug to
execute arbitrary code on this host with the privileges the web server is running.
Solution: Upgrade to mod_ssl 2.8.10 or higher.
CVE-2002-0653
Apache mod_ssl Session Cache Code Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 1513 FAMILY: Web Servers RISK: HIGH NESSUS ID:10888
Family Internet Services 389