(PVS) Signatures - Tenable Network Security

Description: The remote web server can be disabled remotely by sending a malformed HTTP request.
An attacker may use this flaw to prevent the remote host from functioning properly.
Solution: Upgrade to Abyss X1 v1.1.4 or higher.
CVE-2003-1364
mod_jk Chunked Encoding DoS
PVS ID: 1571 FAMILY: Web Servers RISK: HIGH NESSUS ID:11519
Description: The remote host is using a version of the Apache mod_jk module which is older than 1.2.1.
There is a bug in this version which may allow an attacker to use chunked encoding
requests to desynchronize Apache and Tomcat and therefore prevent this host from
working properly.
Solution: Upgrade to mod_jk 1.2.1 or higher.
CVE-2002-2272
AutomatedShops webc.cgi Multiple Overflows
PVS ID: 1572 FAMILY: Web Servers RISK: HIGH NESSUS ID:11516
Description: The remote host is running webc.cgi, a shopping cart application, which is older than 5.020.
This CGI is vulnerable to a remote buffer overflow as well as a local one. An attacker may
exploit this flaw to execute arbitrary code on this host.
Solution: Upgrade to version 5.020 or higher.
CVE Not available
NETGEAR ProSafe Router Password Disclosure / Port Filtering Bypass
PVS ID: 1573 FAMILY: Web Servers RISK: HIGH NESSUS ID:11514
Description: The remote NETGEAR FM114P ProSafe Wireless router discloses the username and the
password of the WAN when it receives specially crafted UPnP SOAP requests.
Solution: Disable UPnP on this device.
CVE Not available
Ecartis User Password Reset Privilege Escalation
PVS ID: 1574 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:11505
Family Internet Services 404