(PVS) Signatures - Tenable Network Security

attacker can potentially read confidential data from protected areas of the server.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-2437
Symantec Norton Antivirus Detection
PVS ID: 2353 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote host is running Symantec's Norton Antivirus version %L
Solution: Ensure that you are running the latest version of Symantec NAV.
CVE Not available
PHP < 5.0.2 Open Bracket Memory Disclosure
PVS ID: 2354 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running a version of PHP that is older than 5.0.2. This
version has a bug that allows an attacker to insert an arbitrary value into an array. When the
PHP parser handles the array, it may leak memory information back to the web client. A
successful attacker would be able to retrieve information from the server that is potentially
confidential in nature.
Solution: Upgrade to PHP 5.0.2 or higher.
CVE Not available
DCP-Portal < 6.1 Multiple Vulnerabilities
PVS ID: 2355 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: The remote host is running a version of DCP-Portal that is reported prone to three distinct
vulnerabilities. DCP-Portal is software that handles content management submitted by
various clients or users. This version is vulnerable to Cross-Site Scripting (XSS), HTML
injection, and HTML-splitting attacks. An attacker exploiting these flaws would be able to
modify HTTP data and/or create malicious links or code for other visiting users to execute.
Solution: Upgrade to version 6.1 or higher.
CVE-2004-2511
Passive Vulnerability Scanner (PVS) Signatures
WordPress BLOG < 1.2.1 wp-login.php HTTP Response Splitting
PVS ID: 2356 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Family Internet Services 594