(PVS) Signatures - Tenable Network Security

PVS ID: 2175 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host appears to be running a version of Apache 2.x that is older than 2.0.48. This
version is vulnerable to a bug that may allow a rogue CGI to disable the httpd service by
issuing over 4K of data to stderr. To exploit this flaw, an attacker would need the ability to
upload a rogue CGI script to this server and to have it executed by the Apache daemon
(httpd).
Solution: Upgrade to version 2.0.48 or higher.
CVE-2004-0092
Argosoft HTTP GET Request Saturation Remote DoS
PVS ID: 2176 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:11734
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Argosoft. This version is reported prone to a denial of service. It is possible to kill
the remote HTTP server by sending an invalid request to it ('GET /index.html\n\n'). An
attacker may exploit this vulnerability to make a web server crash continually or even
execute arbitrary code on a system.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
BadBlue < 2.3 ISAPI Module Remote Administrative Interface Access
PVS ID: 2177 FAMILY: Web Servers RISK: HIGH NESSUS ID:11641
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote BadBlue web server has a bug in the way its security
functions are performed that may allow attackers to gain administrative control of this host.
Solution: Upgrade to version 2.3 or higher.
CVE Not available
CommuniGatePro < 4.1b2 Session Token Disclosure
PVS ID: 2178 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:11567
Description: Synopsis :\n\nThe remote host may allow an attacker to gain unauthorized access to a user's
email.\n\nThe remote CommuniGatePro, according to its version number, is vulnerable to a
flaw that may allow an attacker access the mailboxes of its victims. To exploit such a flaw,
the attacker needs to send an email to a victim with a link to an image hosted on a rogue
server that will store the Referer field sent by the user-agent that contains the credentials
used to access the victim's mailbox.
Family Internet Services 544