27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe<br />

remote host is using the ViewCVS, a tool to browse CVS repositories.\nAccording to its<br />

version number, the remote version of this software is vulnerable to multiple unspecified<br />

vulnerabilities.<br />

Solution: Upgrade to version 1.0-dev or higher.<br />

CVE-2004-0915<br />

PHP Live! < 2.8.2 Remote Configuration File Include<br />

<strong>PVS</strong> ID: 2447 FAMILY: CGI RISK: HIGH NESSUS ID:15928<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a script injection attack.\n\nThe remote host<br />

is running PHP Live!, a live support system for web sites.\nThe remote version of this<br />

software contains an unspecified flaw that may allow an attacker to include a configuration<br />

file hosted on a third party server.\nAn attacker may exploit this flaw to execute arbitrary<br />

PHP code on the remote host.<br />

Solution: Upgrade to version 2.8.2 or higher.<br />

CVE-2004-2485<br />

Squid Proxy Failed DNS Lookup Random Error Messages Information Disclosure<br />

<strong>PVS</strong> ID: 2448 FAMILY: Web Servers<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:15929<br />

Description: Synopsis :\n\nThe remote proxy can be tricked into disclosing portions of its<br />

memory.\n\nThe remote host running a Squid proxy on this port.\nThere is a vulnerability<br />

in the remote version of this software that may allow an attacker to disclose the content of<br />

its memory by causing the use of a freed pointer.<br />

Solution: Upgrade to Squid 2.5.STABLE8 or 3.0-PRE4 or apply the vendor patches.<br />

CVE-2004-2479<br />

GNU WGet Multiple Remote Vulnerabilities<br />

<strong>PVS</strong> ID: 2449 FAMILY: Web Clients<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:Not Available<br />

Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host<br />

is using a version of wget that contains bugs that may allow a malicious to server to<br />

overwrite or inject data in files or perform a directory traversal.<br />

Solution: Upgrade or patch according to vendor recommendations.<br />

CVE-2004-1487<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

Family Internet Services 621

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!