(PVS) Signatures - Tenable Network Security

PVS ID: 2115 FAMILY: FTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is configured with default or easily-guessed
credentials.\n\nThe remote host is running a version of the Serv-U FTP Server that has an
hidden default administration account. This account is reported to be hard-coded but it can
be used only from the loopback interface. It may permit a local attacker to log into the site
maintenance interface.
Solution: No solution is known at this time.
CVE-2004-2532
Mozilla Browser Input Type HTML Tag Unauthorized Access
PVS ID: 2116 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may be tricked into running an executable file.\n\nThe
remote host is using a vulnerable version of Mozilla, an open-source web browser. It is
reported that Mozilla versions prior 1.7.1 present an issue in the INPUT tag. An attacker
may craft a malicious web page that may secretly upload files readable by the victim on a
remote computer.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-0759
Subversion (SVN) < 1.0.3 Remote Buffer Overflow
PVS ID: 2117 FAMILY: Generic RISK: HIGH NESSUS ID:12261
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Subversion, an open-source file management product. According to the version
number, the remote system is vulnerable to at least one remote buffer overflow.
Solution: Upgrade to version 1.0.3 or higher.
CVE-2004-0397
Sympa < 4.1.2 wwsympa.fcgi List Master Authentication Bypass
PVS ID: 2118 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the
bypassing of authentication.\n\nThe remote host is running wwsympa.fcgi, a
web interface for the Sympa mailing list manager. It is reported that this version
of Sympa may permit an attacker to bypass the list master authentication in
order to create unauthorized mailing list.
Solution: Upgrade to version 4.1.2 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 527