(PVS) Signatures - Tenable Network Security

CVE Not available
MikroTik Router Detection
PVS ID: 2515 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: The remote host is a MikroTik router.
Solution: Ensure that this router and default web pages are in accordance with corporate policies.
CVE Not available
Oracle HTTP Listener Default Web Page Detection
PVS ID: 2516 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:10849
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running the Oracle HTTP Configuration interface. This
interface allows anonymous users to view configuration details. In addition, an attacker
may be able to make configuration changes if the default settings are in place.
Solution: Lock down or remove the Oracle HTTP Configuration interface.
CVE Not available
HylaFAX < 4.2.1 Remote Access Control Bypass
PVS ID: 2517 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the
bypassing of authentication.\n\nThe remote host is running HylaFAX, a fax
transmission software. It is reported that HylaFAX is prone to an access control
bypass vulnerability. An attacker exploiting this flaw may be able to gain
unauthorized access to the service.
Solution: Upgrade to version 4.2.1 or higher.
CVE Not available
POP Password Changer Unauthorized Password Change
PVS ID: 2518 FAMILY: POP Server
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication\n\nThe remote host is running POP Password Changer, a server used to
change POP users' passwords, that is vulnerable to unauthorized access. An attacker
exploiting this flaw will be able to change users' passwords.
Family Internet Services 640