(PVS) Signatures - Tenable Network Security

Description: The remote host is running PHP Topsites and has the CGI 'counter.php' installed. There is a
flaw in this CGI which may allow an attacker to overwrite arbitrary files on this host.
Solution: Delete this CGI.
CVE Not available
mod_survey < 3.0.14e / 3.0.15pre6 ENV tags SQL Injection
PVS ID: 1534 FAMILY: CGI RISK: HIGH NESSUS ID:11609
Description: Synopsis :\n\nThe remote web server contains a script which is vulnerable to a SQL
injection attack.\n\nThe remote host is using mod_survey, a perl add-on to manage online
surveys. There is a flaw in the remote installation of mod_survey which makes it vulnerable
to SQL injection attacks when a database backend is being used. An attacker may use this
flaw to gain control of your database.
Solution: Upgrade to mod_survey 3.0.14e or 3.0.15pre6 or higher.
CVE Not available
Apache < 2.0.46 on OS/2 filestat.c Device Name Request DoS
PVS ID: 1535 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:11607
Description: The remote host is running a version of Apache/2.x which is older than 2.0.46 on top of
OS/2. There is an OS/2 specific bug in this version which may allow an attacker to disable
this service remotely by abusing a flaw in the OS/2 specific source file filestat.c.
Solution: Upgrade to Apache 2.0.46 or higher.
CVE-2003-0134
BEA WebLogic Server GET Request Name Disclosure
PVS ID: 1536 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:11606
Description: The remote host is running the WebLogic web server. There is a flaw which allows an
attacker to gain the NetBIOS host name of the remote host.
Solution: No solution known at this time.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
IkonBoard FUNC.pm lang Cookie Arbitrary Command Execution
PVS ID: 1537 FAMILY: CGI RISK: HIGH NESSUS ID:11605
Family Internet Services 395