(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a script injection attack\n\nThe remote host
is using the YaBB web forum software.\nAccording to its version number, the remote
version of this software is vulnerable to JavaScript injection issues using shadow or glow
tags. This may allow an attacker to inject hostile JavaScript into the forum system to steal
cookie credentials or misrepresent site content. When the form is submitted the malicious
JavaScript will be incorporated into dynamically generated content.
Solution: Upgrade to YaBB 1 Gold SP 1.4 or higher.
CVE Not available
Post-Nuke pnTresMailer Directory Traversal Arbitrary File Access
PVS ID: 2440 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:15858
Description: Synopsis :\n\nThe remote host is vulnerable to a directory traversal flaw.\n\nThe remote
host is running a version of the pnTresMailer PostNuke module that is vulnerable to a
directory traversal attack.\nAn attacker may use this flaw to read arbitrary files on the
remote web server with the privileges of the web server process.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-1205
Paros Web Proxy Detection
PVS ID: 2441 FAMILY: Policy RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote host is running Paros version: %L \n \n Paros is a web
proxy that is used to test the security of web applications and servers. A remote user
running Paros can surrepititiously test the web server for SQL injection, cross-site
scripting, buffer overflows, and more.
Solution: Ensure that the remote Paros server is authorized for use within your environment.
CVE Not available
Visionael Scanner Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2442 FAMILY: Policy RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote host is running Visionael Scanner. Visionael scanner is a
network discovery and penetration testing tool. The presence of this tool typically indicates
that someone is scanning the network for vulnerabilities.
Solution: Ensure that the remote Visionael server is authorized for use within your environment.
Family Internet Services 619