(PVS) Signatures - Tenable Network Security

een reported to be prone to a cross-site scripting issue. An attacker may steal cookie-based
authentication credentials from a legitimate user by sending malformed links to this site.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
Keene Digital Media Server Multiple Script Authentication Bypass
PVS ID: 2262 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is running Keene Digital Media Server, a web
application for Microsoft Windows designed to share media files on the Internet. This
version of the software has been reported to be prone to an authentication bypass
vulnerability. An attacker may access some part of the administration interface
(adminmessage.kspx and adminshares.kspx) without providing proper authentication.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
Ipswitch WhatsUp Gold prn.htm GET Request Remote DoS
PVS ID: 2263 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS)
attack.\n\nAccording to its HTTP banner, the remote host appears to be running a
vulnerable version of Ipswitch WhatsUp Gold, a network management application for
Microsoft Windows. It is reported that versions up to and incluing 8.03 hotfix 1 are prone
to a remote denial of service vulnerability when processing certain HTTP GET requests.
An attacker may deny service to legitimate users by sending a malformed GET request for
the 'prn.html' file.
Solution: Upgrade to WhatsUp Gold 8.03 Hotfix 3 or higher.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Ipswitch WhatsUp Gold Notification Instance Name Remote Overflow
PVS ID: 2264 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nAccording
to its HTTP banner, the remote host appears to be running a vulnerable version of Ipswitch
WhatsUp Gold, a network management application for Microsoft Windows. It is reported
that versions up to and incluing 8.03 Hotfix 1 are prone to a remote buffer overflow
vulnerability when processing notification instance names in the web interface. An attacker
may use this vulnerability to execute arbitrary code on the remote host.
Family Internet Services 568