(PVS) Signatures - Tenable Network Security

Vignette StoryServer Information Disclosure
PVS ID: 1566 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:11526
Description: The remote host is running Vignette StoryServer. There is a flaw in this version which may
allow an attacker to extract parts of the sessions of the other users.
Solution: The vendor has released a patch to address this issue.
CVE-2002-0385
Coppermine Gallery < 1.1 Beta 2 PHP Code Execution
PVS ID: 1567 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: The remote host is running Coppermine Gallery, a set of PHP scripts to handle galleries of
pictures. There is a flaw in the version of Coppermine Gallery used by the remote host that
may allow an attacker to execute arbitrary commands on this host.
Solution: Upgrade to Coppermine 1.1 beta 2 or higher.
CVE Not available
Linksys Router Default Password
PVS ID: 1568 FAMILY: Web Servers RISK: HIGH NESSUS ID:11522
Description: The remote Linksys router has its default password (admin) set. An attacker may use it to
reconfigure this device.
Solution: Log into the remote host and set a strong password for the administrator.
CVE Not available
VPOPMail vpopmail.php Remote Command Execution
PVS ID: 1569 FAMILY: CGI RISK: HIGH NESSUS ID:11397
Description: The remote VPOPMail webmail interface lets authenticated users to execute arbitrary
commands on this host. An attacker may use it to gain a shell on this host.
Solution: Upgrade to the VPOPMail 0.98 or higher.
CVE Not available
Abyss Malformed GET Request Remote DoS
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 1570 FAMILY: Web Servers RISK: HIGH NESSUS ID:11521
Family Internet Services 403