27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

<strong>PVS</strong> ID: 2363 FAMILY: Web Servers<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:15463<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe<br />

remote Squid caching proxy, according to its version number, may be vulnerable to a<br />

remote denial of service.\n\nThis flaw is caused due to an input validation error in the<br />

SNMP module.\n\nAn attacker can exploit this flaw to crash the server with a specially<br />

crafted UDP packet.<br />

Solution: Upgrade to Squid 2.5.STABLE7 or higher.<br />

CVE-2004-0918<br />

CJOverkill < 4.0.4 trade.php XSS<br />

<strong>PVS</strong> ID: 2364 FAMILY: Web Servers<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:15462<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack\n\nThe<br />

remote server runs a version of CJOverkill, a free traffic trading script that is as old as or<br />

older than version 4.0.3.\nThe remote version of this software is vulnerable to a cross-site<br />

scripting attack.\n\nAs a result of this vulnerability, it is possible for a remote attacker to<br />

create a malicious link containing script code that will be executed in the browser of an<br />

unsuspecting user when followed.\n\nThis may facilitate the theft of cookie-based<br />

authentication credentials as well as other attacks.<br />

Solution: Upgrade to version 4.0.4 or higher.<br />

CVE-2004-2193<br />

IceWarp Web Mail < 5.3.0 Multiple Vulnerabilities<br />

<strong>PVS</strong> ID: 2365 FAMILY: Web Servers RISK: HIGH NESSUS ID:15469<br />

Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host<br />

is running IceWarp Web Mail, a webmail solution available for the Microsoft Windows<br />

platform.\n\nThe remote version of this software is vulnerable to multiple input validation<br />

issues that may allow an attacker to compromise the integrity of the remote host.<br />

Solution: Upgrade to IceWarp Web Mail 5.3.0 or higher.<br />

CVE-2004-1674<br />

Gaim < 1.0.2 Multiple Vulnerabilities<br />

<strong>PVS</strong> ID: 2366 FAMILY: Internet Messengers<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

RISK:<br />

MEDIUM<br />

NESSUS ID:Not Available<br />

Family Internet Services 597

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!