(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote host is running a version of MySQL that is older than
version 3.23.49 or than 4.0.20. The version of the utility Mysqlhotcopy included in these
versions of MySQL is reported to be prone to a vulnerability that may permit an attacker to
overwrite arbitrary files on the database server with the privilege of the targeted user.
Privilege escalation may also be possible. An attacker requires local interactive access in
order to exploit this vulnerability.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-0457
Opera getElementsByTagName Javascript Method DoS
PVS ID: 2130 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS)
attack.\n\nThe remote host is using a version of Opera that is affected by a security
weakness that may permit an attacker to crash the remote web browser using
Javascript.
Solution: Upgrade or patch according to vendor recommendations.
SQL Server Detection
CVE Not available
PVS ID: 2131 FAMILY: Database
Description: Detects SQL servers on port 1433
Solution: N/A
CVE Not available
eGroupWare < 1.0.0.004 Multiple XSS
RISK: Risk
not available
NESSUS ID:Not Available
PVS ID: 2132 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
remote host is running eGroupWare, a web-based groupware solution. It is reported that
versions prior 1.0.0.004 are prone to a cross-site scripting issue. An attacker may steal
cookie-based authentication credentials from a legitimate user by sending malformed links
to this web site.
Solution: Upgrade to version 1.0.0.004 or higher.
CVE-2004-1467
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 531