(PVS) Signatures - Tenable Network Security

RISK:
MEDIUM
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote JBoss server is vulnerable to an information disclosure flaw that
may allow an attacker to retrieve the physical path of the server installation, its security
policy, or to guess its exact version number.\nAn attacker may use this flaw to gain more
information about the remote configuration.
Solution: Upgrade to JBoss 3.2.8, 4.0.3 or higher.
ZenWorks Detection
CVE-2005-2006
PVS ID: 3022 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running ZenWorks, a remote management interface from Novell.
Solution: N/A
CVE Not available
Cisco VPN Concentrator Group Name Enumeration
PVS ID: 3023 FAMILY: SNMP Traps
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote VPN concentrator is subject to an information disclosure flaw.\nAn
attacker connecting in Agressive mode can determine whether a remote Cisco group is
defined. This can allow the attacker the ability to garner information useful in future brute
force attacks.
Solution: http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpn3000/4_7/471con3k.htm
CVE-2005-2025
MercuryBoard User-Agent HTTP Header SQL Injection
PVS ID: 3024 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:18541
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running MercuryBoard, a web-based message board written in PHP. This version of
MercuryBoard is vulnerable to a remote SQL Injection flaw.\nAn attacker exploiting this
flaw would send a malformed HTTP query to the application. Successful exploitation
would result in the attacker being able to read or write confidential data. In addition, the
attacker may be able to execute arbitrary code on the remote database server.
Family Internet Services 771