(PVS) Signatures - Tenable Network Security

vulnerable UW-IMAP server that had enabled the CRAM-MD5 authentication scheme. The
attacker would then be able to log in as any valid user.\nIt is important to note that the
IMAP daemon will automatically enable CRAM-MD5 if the /etc/cram-md5.pwd file exists.
Solution: Upgrade or patch according to vendor recommendations. In addition, the fact that
CRAM-MD5 is enabled indicates that the server is storing the IMAP passwords in
plaintext. Ensure that the /etc/cram-md5.pwd file is mode 0400.
CVE-2005-0198
CoolForum < 0.8 SQL Injection
PVS ID: 2569 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nCoolForum is a bulletin board written in PHP. This version of CoolForum is
vulnerable to a remote SQL injection attack. An attacker exploiting this flaw would be able
to manipulate data and execute commands on the remote system.
Solution: Upgrade to version 0.8 or higher.
CVE Not available
WebWasher Proxy Server < 3.4 Detection
PVS ID: 2570 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThere is a flaw in the remote WebWasher Proxy. The proxy, when issued a
CONNECT command for 127.0.0.1 (or localhost/loopback), will comply with the request
and initiate a connection to the local machine. This bypasses any sort of firewalling as well
as gives access to local applications that are only bound to the loopback.\nThe version of
WebWasher is %L
Solution: upgrade to version 3.4 or higher.
CVE-2005-0316
WebWasher Proxy Server Detection
PVS ID: 2571 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running client software that may be considered
questionable.\n\nThe remote host is running WebWasher, an anonymizing web proxy. A
user accessing this proxy can effectively obfuscate their web traffic to possibly bypass
Acceptable Use Policies..
Solution: Ensure that such a proxy is authorized under corporate policies and guidelines.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 655