(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
remote host is using a version of Opera that is prone to a security flaw where a malicious
website can spoof a cross-domain dialog box that may entice the local user to enter
information based on the bogus domain. For example, if the malicious website were to
spoof a trusted domain, the user may enter confidential information into the dialog box.
These sort of exploits are commonly referred to as 'Phishing' scams.
Solution: Install Opera 7.55.0 or higher.
CVE Not available
Konqueror < 3.2.2-2 Cross-Domain Dialog Box Spoofing
PVS ID: 2374 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
remote host is using a version of Konqueror that is prone to a security flaw where a
malicious website can spoof a cross-domain dialog box that may entice the local user to
enter information based on the bogus domain. For example, if the malicious website were
to spoof a trusted domain, the user may enter confidential information into the dialog box.
These sort of exploits are commonly referred to as 'Phishing' scams.
Solution: Upgrade to version 3.2.2-2 or higher.
CVE Not available
Ability FTP Server Remote Buffer Overflow
PVS ID: 2375 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the Ability FTP Server. It is reported that Ability FTP Server is prone to a remote
buffer overflow via the STOR command. An attacker exploiting this flaw would only need
to be able to craft and send a query to the FTP server on its service port (usually 21)
Solution: No solution is known at this time.
CVE-2004-1626
NetCaptor Cross-Domain Dialog Spoofing
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2376 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
remote host is running NetCaptor. NetCaptor is a web browser that is installed 'over'
Internet Explorer, using the IE core engine while adding functionality to the GUI. This
version of NetCaptor is vulnerable to a flaw where a malicious website can spoof a domain
via the Dialog box. An attacker exploiting this flaw may be able to access confidential data
from the client.
Family Internet Services 600