27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

PerlDesk < 2 kb.cgi view Parameter SQL Injection<br />

<strong>PVS</strong> ID: 2597 FAMILY: CGI RISK: HIGH NESSUS ID:16323<br />

Description: The remote host is running PerlDesk, a web-based help desk application\nwritten in<br />

perl.\n\nThe remote version of this software is vulnerable to several SQL\ninjection<br />

vulnerabilities that may allow an attacker to execute\narbitrary SQL statements on the<br />

remote SQL database.<br />

Solution: Upgrade or patch according to vendor recommendations.<br />

CVE-2005-0343<br />

PHP-Fusion viewthread.php Arbitrary Thread Access<br />

<strong>PVS</strong> ID: 2598 FAMILY: CGI RISK: LOW NESSUS ID:Not Available<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve<br />

sensitive files or data.\n\nThe remote host is running a version of PHP-Fusion that is<br />

vulnerable to an information leak via the viewthread.php script. Specifically,<br />

viewthread.php does not properly sanitize $_GET variables. An attacker exploiting this<br />

flaw would be able to view all threads (to include protected threads).<br />

Solution: No solution is known at this time.<br />

CVE-2005-0345<br />

MSN Messenger Version Detection<br />

<strong>PVS</strong> ID: 2599 FAMILY: Internet Messengers RISK: INFO NESSUS ID:Not Available<br />

Description: The remote host is running Microsoft MSN Messenger %L<br />

Solution: Ensure that you are running the latest version of MSN Messenger.<br />

CVE Not available<br />

MSN Messenger UserID Detection<br />

<strong>PVS</strong> ID: 2600 FAMILY: Internet Messengers RISK: INFO NESSUS ID:Not Available<br />

Description: The remote host is running Microsoft MSN Messenger. <strong>PVS</strong> tracks the most recent UserID<br />

that is logging into the MSN Messenger servers. The UserID used to access MSN<br />

Messenger is %L<br />

realtime<br />

Solution: Ensure that you are running the latest version of MSN Messenger.<br />

CVE Not available<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

Family Internet Services 663

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!