(PVS) Signatures - Tenable Network Security

Solution: Upgrade or patch according to vendor recommendations.
CVE-2002-2240
OpenSSL < 0.9.6m / 0.9.7d Multiple DoS
PVS ID: 2183 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:12110
Description: Synopsis : \n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is using a version of OpenSSL that is older than 0.9.6m or 0.9.7d There are
several vulnerabilities in this version of OpenSSL that may allow an attacker to cause a
denial of service against the remote host. The reported version of OpenSSL is: \n %L
Solution: Upgrade to version 0.9.6m, 0.9.7d or higher.
CVE-2004-0112
Pi3Web Webserver < 2.0.3 HTTP GET Request Overflow DoS
PVS ID: 2184 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:11695
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote Pi3Web
web server may crash when it is sent a malformed GET request.
Solution: Upgrade to Pi3Web 2.0.3 or higher.
CVE-2003-0276
Squid Remote NTLM Authentication Password Handling Remote Overflow
PVS ID: 2185 FAMILY: Web Servers RISK: HIGH NESSUS ID:12294
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote server is
running a Squid proxy server. This version is reported vulnerable to a remote buffer
overflow in the NTLM authentication routine. Exploitation of this vulnerability can allow
remote attackers to gain access to confidential data.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-0541
WebServer 4D HTTP GET Request Remote Overflow
PVS ID: 2186 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:11560
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running WebServer 4D. It is possible to kill the web server by sending an oversized string
of '