(PVS) Signatures - Tenable Network Security

Description: The remote web server may disclosure the physical path of the remote web root when asked
for a special MS-DOS device as, for instance, lpt9.xtp. An attacker may use this flaw to
gain more knowledge about this host.
Solution: Upgrade to the Resin 2.1s020604 or higher.
CVE-2002-2090
Savant < 3.0 GET Request CGI Source Disclosure
PVS ID: 1518 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: The remote Savant Web Server can be forced by an attacker to display the content of the
CGIs it runs instead of the output of their execution. An attacker may use this flaw to view
the source code of your scripts or to get a copy of your binary CGIs.
Solution: Upgrade to Savant 3.x or higher.
CVE-2000-0521
Pi3Web WebServer < 2.0.1 CGI Handler Overflow
PVS ID: 1519 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:11099
Description: The remote web server may crash when it is sent a too long CGI parameter multiple times.
An attacker may use this flaw to prevent this host from working properly.
Solution: Upgrade to Pi3Web 2.0.1 or higher.
CVE-2002-0142
Shoutcast Multiple GET Request Remote DoS
PVS ID: 1520 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:10717
Description: The remote ShoutCast server can be disabled remotely by sending a multiple GET requests
to it. An attacker may use this flaw to prevent this host from working properly.
Solution: No solution is known at this time.
CVE-2001-1304
AnalogX SimpleServer:WWW < 1.2 Remote DoS
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 1521 FAMILY: Web Servers RISK: HIGH NESSUS ID:11305
Family Internet Services 391