(PVS) Signatures - Tenable Network Security

RISK:
MEDIUM
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote
server is running 4D WebStar Web Server. The remote server is vulnerable to two issues:
an attacker may be able to obtain the listing of a directory by appending a star (*) to the
directory name and an attacker may obtain the file php.ini by directly requesting
/cgi-bin/php.ini
Solution: Upgrade to 4D WebStar 5.3.3 or higher.
CVE-2004-0696
Abyss < 1.1.6 httpd GET Request Remote Overflow
PVS ID: 2172 FAMILY: Web Servers RISK: HIGH NESSUS ID:11784
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote Abyss
Web server is vulnerable to a buffer overflow that may be exploited by an attacker to
execute arbitrary code on this host.
Solution: Upgrade to Abyss 1.1.6 or higher.
CVE-2003-1337
Apache < 1.3.28 Multiple Vulnerabilities
PVS ID: 2173 FAMILY: Web Servers RISK: HIGH NESSUS ID:11793
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host appears to be running a version of Apache that is older than 1.3.28 There are
several flaws in this version, which may allow an attacker to disable the remote server.
Solution: Upgrade to version 1.3.28 or higher.
CVE-2002-0061
Apache < 1.3.29 Multiple Vulnerabilities
PVS ID: 2174 FAMILY: Web Servers RISK: HIGH NESSUS ID:11915
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote
host appears to be running a version of Apache which is older than 1.3.29 There
are several flaws in this version that may allow an attacker to possibly execute
arbitrary code through mod_alias and mod_rewrite.
Solution: Upgrade to version 1.3.29 or higher.
CVE-2003-0542
Apache < 2.0.48 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 543