(PVS) Signatures - Tenable Network Security

Solution: Upgarde or patch according to vendor recommendations.
CVE-1999-0953
RaidenHTTPd < 1.1.31 Crafted Request Remote File Access
PVS ID: 2594 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote host is running RaidenHTTPd. RaidenHTTPd is a
web server that is designed for the Microsoft platform. This version of RaidenHTTPd is
vulnerable to a flaw where an attacker can read any file on the web server by using the
header 'Host: localhost'.\nThe remote version of RaidenHTTPd is %L
Solution: Upgrade to version 1.1.31 or higher.
CVE Not available
3Com 3CServer FTP Server < 2.0 Remote Overflow
PVS ID: 2595 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
vulnerable to several remote overflows. An attacker exploiting these flaws would need to
be able to log into the FTP server and run standard FTP commands. If anonymous access is
enabled, the 'Anonymous' account would be sufficient to generate the overflow on the
remote machine.
Solution: Upgrade to version 2.0 or higher.
CVE-2005-0277
BXCP < 0.2.9.8 index.php show Parameter PHP Content Disclosure
PVS ID: 2596 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to
retrieve sensitive files or data.\n\nThe remote host is running BXCP. BXCP is a web
application which does content management. There is a flaw in this version of
BXCP that would allow an attacker to view the source code (or content) of any PHP
script on the system. The flaw is due to how the index.php script handles the 'show'
parameter. An attacker exploiting this flaw would be able to use a '../../' directory
traversal syntax within the 'show' parameter, thereby rendering the code of any PHP
script on the system.\nThe remote host is running BXCP version %L
Solution: Upgrade to 0.2.9.8 or higher.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 662