(PVS) Signatures - Tenable Network Security

Description: The remote host is running a NetCharts server with the default login and password
(Admin/Admin).
Solution: Change the default password.
CVE Not available
12Planet Chat Server Path Disclosure
PVS ID: 1542 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:11592
Description: The remote host is running 12Planet Chat Server, a web based chat server written in Java.
There is a flaw in this software that may allow an attacker to obtain the physical path of the
installation of the remote server by sending a malformed request to this service.
Solution: None solution is known at this time.
CVE Not available
12Planet Chat Server ClearText Password Remote Disclosure
PVS ID: 1543 FAMILY: CGI RISK: LOW NESSUS ID:11591
Description: The remote host is running 12Planet Chat Server over an unencrypted channel. An attacker
who can sniff traffic on this network may use this configuration issue to obtain the
password of the administrator of this site and use it to take control.
Solution: No solution is known at this time.
CVE Not available
JetDB Direct Request Database Download
PVS ID: 1544 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: The following request was used to download a JetDB database over HTTP : %P
Solution: Ensure that proper permissions are set on this file.
CVE Not available
YaBB SE < 1.5.2 Remote File Inclusion and SQL Injection
PVS ID: 1545 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:11588
Description: The remote host is running the YaBB SE forum management system. There is a flaw in this
version which may allow an attacker to execute arbitrary commands on this host and to
inject arbitrary values in the remote SQL database.
Family Internet Services 397