(PVS) Signatures - Tenable Network Security

Sami HTTP Server v1.0.5 Remote Overflow
PVS ID: 2620 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:16468
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host
appears to be running Sami HTTP Server v1.0.5 or older. A vulnerability has been reported
for Sami HTTP server v1.0.5. An attacker may be capable of corrupting data such as return
address, and thereby control the execution flow of the program. This may result in denial of
service or execution of arbitrary code.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
Kayako eSupport Multiple XSS
PVS ID: 2621 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:17598
Description: The remote host is running Kayako eSupport, a web-based support and help desk
application. This version of Kayako is vulnerable to a Cross-Site Scripting (XSS) attack.
An attacker exploiting this flaw would need to be able to convince an unsuspecting user to
visit a malicious website. Upon successful exploitation, the attacker would be able to
possibly steal credentials or execute browser-side code.\nThe remote host is running %L
Solution: Upgrade to a version greater than 2.3.1.
CVE-2005-2463
BrightStor ARCserve/Enterprise Backup Default Account
PVS ID: 2622 FAMILY: Generic RISK: HIGH NESSUS ID:16390
Description: Synopsis :\n\nThe remote host is configured with default or easily-guessed
credentials.\n\nThe remote host is running UniversalAgent, an agent used by BrightStor
ARCserve to perform backups. The remote version of this agent contains a default account
with the username '\x02root\x03' and password '\x02