(PVS) Signatures - Tenable Network Security

Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-2475
Rhinosoft DNS4Me Multiple Vulnerabilities
PVS ID: 2307 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Rhinosoft DNS4Me, a dynamic DNS software for Windows
systems. DNS4Me includes a small web server that can serve static content. It is reported
that this embedded web server is prone to multiple security flaws including remote denial
of service and cross-site scripting. An attacker can crash the server by sending an
abnormally long request or steal cookie-based authentication credentials by sending a
malformed link to this site.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-1691
Tutos Multiple Vulnerabilities
PVS ID: 2308 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to SQL injection
and cross-site scripting attacks.\n\nThe remote host is running a vulnerable version of
Tutos. It is reported that Tutos 1.1.20040414 is prone to multiple input validation
weaknesses. Due to insufficient user input validation, an attacker may carry out SQL
injection or cross-site scripting attacks on this host.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-2162
Apache < 2.0.52-dev 'Satisfy' Directive Access Control Bypass
PVS ID: 2309 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is running Apache Web Server 2.0.51. It is reported that
this version of Apache is vulnerable to an access control bypass attack. This issue occurs
when using the 'Satisfy' directive. An attacker may gain unauthorized access to restricted
resources if access control relies on this directive.
Solution: Upgrade to version 2.0.52-dev or higher.
CVE-2004-0811
Alt-N MDaemon Multiple Buffer Overflows
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 581