(PVS) Signatures - Tenable Network Security

Solution: Upgrade to Powie PHP Forum 1.15 or higher.
CVE-2002-0319
Sympa < 4.1.2 List Creation Authentication Bypass
PVS ID: 1733 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: The remote host is running wwsympa.fcgi, a web interface for the Sympa mailing list
manager. It is reported that this version of Sympa may permit an attacker to bypass the list
master authentication in order to create unauthorized mailing list.
Solution: Upgrade to version 4.1.2 or higher.
HTTP Proxy Detection
CVE Not available
PVS ID: 1734 FAMILY: Web Clients RISK: NONE NESSUS ID:Not Available
Description: The remote host is a proxy server. PVS has determined this due to the manner of header
values: \n%L
Solution: N/A
Web Client Detection
CVE Not available
PVS ID: 1735 FAMILY: Web Clients RISK: NONE NESSUS ID:Not Available
Description: The remote host is using the following web client : \n %L
Solution: N/A
CVE Not available
Lynx Command Line URL CRLF Injection
PVS ID: 1736 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: The remote host is using Lynx as a web browser. The version used is vulnerable to a
command line header injection which may allow an attacker to use Lynx to send potentially
harmful requests. An attacker may use this flaw to attack third party hosts even from a
limited (ie: lynx-only) environment. The version used on the remote host is : \n%L
Solution: No solution is known at this time.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 441