(PVS) Signatures - Tenable Network Security

Description: The remote host is using a version of mod_ssl which is older than 2.8.10. This version is
vulnerable to a flaw which may allow an attacker to successfully perform a cross-site
scripting attack. *** Note that several Linux distributions (such as RedHat) patched this
CGI without increasing its version number, therefore this might be a false positive.
Solution: Upgrade to mod_ssl 2.8.10 or higher.
CVE-2002-1157
Snitz Forums < 3.4.03 register.asp Email Parameter SQL Injection
PVS ID: 1530 FAMILY: CGI RISK: HIGH NESSUS ID:11621
Description: Synopsis :\n\nThe remote web server contains a script which is vulnerable to a SQL
injection attack.\n\nThe remote host is using Snitz Forum 2000. This set of CGI is
vulnerable to a SQL injection issue which may allow an attacker to execute arbitrary
commands on this host.
Solution: Upgrade to version 3.4.03 or higher.
CVE Not available
eServ HTTP Connection Saturation Memory Leak Remote DoS
PVS ID: 1531 FAMILY: Web Servers RISK: HIGH NESSUS ID:11619
Description: The remote web server (eServ) contains a memory leak which may allow an attacker to
disable it remotely by making a large amount of requests to this port.
Solution: No solution known at this time.
CVE-2003-0290
Horde and IMP Test Script Disclosure
PVS ID: 1532 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:11617
Description: The remote host is running Horde and/or IMP with the test script available to anyone. An
attacker may use these to gain valuable information about the remote host.
Solution: Delete all the files named 'test.php' on the remote host.
CVE Not available
PHP Topsites counter.php Arbitrary File Overwrite
PVS ID: 1533 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:11611
Family Internet Services 394