(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 1.9.7 or higher.
CVE-2005-2004
HTTP Plaintext Password Authentication
PVS ID: 3018 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host passes information across the network in an
insecure manner.\n\nThe remote client sent an HTTP auth request in cleartext. The
base64-encoded password it used was:\n\n %L
realtime
Solution: Use SSL or a stronger authentication mechanism.
CVE Not available
YAWS < 1.56 Script File Source Code Disclosure
PVS ID: 3019 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:18522
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files.\n\nThe remote host is running YAWS, a web server. This version of YAWS
is vulnerable to a NULL byte script file source code disclosure bug. An attacker appending
a '%00' to the end of a request can download source code.\n\nThe remote host is running
%L
Solution: Upgrade to version 1.56 or higher.
CVE-2005-2008
Razor-agents < 2.72 Multiple DoS
PVS ID: 3020 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running the razor-agent, a distributed client that connects to the razor spam
detection and filtering network. This version of Razor-agent is vulnerable to a remote
Denial of Service (DoS) attack via a malformed query. The details of the attack vectors are
not currently known
Solution: Upgrade to version 2.72 or higher.
CVE-2005-2024
Passive Vulnerability Scanner (PVS) Signatures
JBoss Malformed HTTP Request Remote Configuration Information Disclosure
PVS ID: 3021 FAMILY: Web Servers NESSUS ID:18526
Family Internet Services 770