(PVS) Signatures - Tenable Network Security

Tor Tunnel Detection
PVS ID: 2543 FAMILY: Policy RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote client is routing network traffic over the Tor Tunnel
network. The Tor tunnel allows users to run applications such as peer-to-peer clients,
instant messaging, web browsers over a single encrypted HTTP tunnel. Tor also tunnels
and encrypts the DNS requests associated with such applications. By sending traffic over
the Tor network, users can bypass corporate policies, firewalls, and guidelines.
Solution: Ensure that the usage of the Tor network is in alignment with corporate polices and
guidelines.
CVE Not available
CMSimple < 2.4 Beta 5 Multiple Remote Input Validation Vulnerabilities
PVS ID: 2544 FAMILY: CGI RISK: LOW NESSUS ID:19693
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML injection attack.\n\nThe remote
host is running a version of CMSimple, a content management system. The remote version
of this software is prone to multiple input validation vulnerabilities. An attacker may
exploit these flaws to inject arbitrary code to steal authentication cookies.
Solution: Upgrade to CMSimple 2.4 Beta 5 or higher.
CVE Not available
Siteman < 1.1.11 Page User Database Privilege Escalation
PVS ID: 2545 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:16216
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is running Siteman, a web-based content management
system written in PHP. The remote version of this software is vulnerable to a privilege
escalation vulnerability. An attacker with a valid username and password may escalate
privileges by making a specially crafted request to the remote server.
Solution: Upgrade to SiteMan 1.1.11 or higher.
CVE-2005-0305
ExBB Nested BBcode XSS
PVS ID: 2546 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:16223
Family Internet Services 648