(PVS) Signatures - Tenable Network Security

PVS ID: 2489 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:10629
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote Lotus Domino server is running with the default
administrative databases. An attacker finding these databases may be able to pull
confidential data from the remote database.
Solution: Restrict access to these databases.
CVE-2002-0664
Big Sister Information Leak
PVS ID: 2490 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running Big Sister network monitoring software. Big Sister
gives anonymous users quite a bit of information regarding critical servers, uptime,
response times, and more. An attacker accessing these pages would be able to map out
potential targets
Solution: Use ACLs or firewalls to prevent network-based access.
CVE Not available
Squid Server Report Information Disclosure
PVS ID: 2491 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running the Squid proxy. The server has web-based proxy
reporting enabled. An attacker viewing these pages would be able to gain information that
may be useful in future attacks.
Solution: Use ACLs to protect the Squid proxy reports.
CVE Not available
Ganglia Cluster Report Information Disclosure
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2492 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running the Ganglia Cluster Toolkit. This toolkit is used to
manage and display information regarding critical servers. Anonymous users who access
this toolkit would be able to peruse the different machines in the cluster. In addition, they
would be able to query each specific machine for information regarding OS level, current
load and more.
Family Internet Services 633