(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\n It is
possible to make the remote IOS crash by sending malformed SIP packets. These
vulnerabilities are documented as CISCO bug id CSCdz39284 and CSCdz41124.
Solution: http://www.cisco.com/warp/public/707/cisco-sa-20030221-protos.shtml
CVE-2003-1115
IBM DB2 Multiple Vulnerabilities
PVS ID: 2252 FAMILY: Database RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a IBM DB/2 Universal Database Server. It is reported that versions up to and
including 8.1 are vulnerable to multiple critical vulnerabilities including multiple remote
buffer overflows. Because DB/2 banners sent over the network do not include the installed
FixPak number, this alert may be a false positive.
Solution: Install the relevant Fixpak (Fixpak 8 for DB/2 8.1 or Fixpak 12 for DB/2 7.x) from IBM.
CuteNews <
CVE-2004-1372
PVS ID: 2253 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:17256
Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS)
attack.\n\nAccording to its version number, the remote host is running a version of
CuteNews that allows an attacker to inject arbitrary script through the variables
'X-FORWARDED-FOR' or 'CLIENT-IP' when adding a comment. On one hand, an
attacker can inject a client-side script to be executed by an administrator's browser when
he/she chooses to edit the added comment. On the other, an attacker with local access could
leverage this flaw to run arbitrary PHP code in the context of the web server user.
Additionally, it suffers from a cross-site scripting flaw involving the 'search.php' script.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-0645
Apache < 2.0.51 Multiple Vulnerabilities
PVS ID: 2254 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host appears to be running a version of Apache 2.x that is older than 2.0.51. It is
reported that these versions of Apache are prone to a denial of service issue related to
mod_ssl. An attacker may force a SSL connection to be aborted and therefore cause the
Apache server to enter in an infinite loop, consuming CPU resources.
Family Internet Services 565