(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running the Endymion MailMan application. This
application allows remote users to access their email via a web interface. There have been
many flaws found in the mailman.cgi perl script. In addition, the current features of
Mailman allow it to be used as a remote attack tool. As Mailman takes Username,
Password, and Server as arguments for login, it is possible to use Mailman as a POP3
scanner and/or brute-force password scanner. For example, an attacker could automate an
attack against internal POP3 accounts by simply bouncing the attack through an instance of
Mailman in the DMZ. An attacker without access to the internal network would still be able
to brute-force valid accounts simply by using Mailman to identify internal POP3 servers
and then bouncing the attack through Mailman.
Solution: Ensure that this application is authorized and properly protected.
CVE Not available
Network Query Tool Detection
PVS ID: 2743 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running the Network Query Tool CGI script. This script
allows anonymous, remote users to perform port scans, whois, DNS queries, ping,
traceroute, and more via a web interface. An attacker coming upon this application would
be able to use the script to perform discovery scanning against any range of addresses. This
would include, but not be limited to, internal IP ranges.
Solution: Ensure that this application is valid with respect to corporate policies and guidelines. If the
application is required, consider using Access Control Lists (ACLs) or other security
measures to block unauthorized usage.
CVE Not available
Apache < 2.0.50 Input Header Folding and mod_ssl DoS
PVS ID: 2744 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:12293
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is using a version of the Apache web server that is less than 2.0.50. This
version is vulnerable to two (2) remote Denial of Service (DoS) attacks. The first issue
stems from a failure to properly manage memory and could lead to the consumption of
massive amounts of memory and, alledgedly,a potential heap overflow. The second issue
stems from mod_ssl's inability to handle sessions that terminate before any bytes of data
have been sent. This second flaw results in a memory violation that leads to a loss of
availability to valid users.
Solution: Upgrade to Apache 2.0.50 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 706