(PVS) Signatures - Tenable Network Security

Description: The remote server is acting as a VPN server.
Solution: N/A
CVE Not available
Fortinet VPN Server Detection (over PPTP)
PVS ID: 2916 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote host is running the Fortinet %L PPTP VPN.
Solution: Ensure that the VPN is within corporate policy.
CVE Not available
JGS-Portal < 3.03 Multiple Scripts SQL Injection
PVS ID: 2917 FAMILY: CGI RISK: HIGH NESSUS ID:18289
Description: The remote host is running JGS-Portal, a plugin for the Woltlab web\napplication. This
version of JGS-Portal is vulnerable to a remote SQL\ninjection attack. An attacker
exploiting this flaw would send a\nmalformed HTTP query to one of the following php
scripts:\n- jgs_portal.php\n- jgs_portal_statistik.php\n- jgs_portal_beitraggraf.php\njgs_portal_mitgraf.php\n-jgs_portal_themengraf.php\njgs_portal_viewsgraf.php\n\nSuccessful
exploitation would result in the attacker being able
to\nread or write confidential data. In addition, the attacker may be\nable to execute
arbitrary code on the remote database server.
Solution: Upgrade to version 3.0.3 or higher.
CVE Not available
WordPress < 1.5.1.2 SQL Injection and XSS
PVS ID: 2918 FAMILY: CGI RISK: HIGH NESSUS ID:18301
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running WordPress, a web blog manager written in PHP. The remote version of this
software is vulnerable to various flaws that may allow an attacker to perform a SQL
injection attack against the remote host. Successful exploitation would allow an attacker to
read/write confidential data as well as potentially execute arbitrary code on the remote
database. In addition, the remote host is vulnerable to multiple cross-site scripting (XSS)
flaws.
Solution: Upgrade to WordPress 1.5.1.2 or higher.
CVE-2005-1810
Passive Vulnerability Scanner (PVS) Signatures
ignitionServer < 0.3.6p1 Channel Locking Remote DoS
Family Internet Services 756