(PVS) Signatures - Tenable Network Security

Solution: Upgrade or patch according to vendor recommendations.
Raxnet Cacti Detection
CVE-2005-2028
PVS ID: 3025 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running Cacti, a web frontend to RRDTool. Cacti allows
administrators to view network graphs, utilization, architecture, and more. An attacker
happening upon an instance of Cacti would gain information useful in future attacks.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
i-Gallery Traversal File Access / XSS
PVS ID: 3026 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:18539
Description: Synopsis :\n\nThe remote host is vulnerable to a Directory Traversal flaw.\n\nThe remote
host is running i-Gallery, a web-based photo gallery.\nThis version of i-Gallery is
vulnerable to multiple flaws. Most importantly, the application is vulnerable to a directory
traversal flaw. An attacker exploiting this flaw would only need to be able to send '../'
HTTP requests to the vulnerable system. A successful attack would result in the attacker
being able to download confidential files (such as password data).
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-2033
IpSwitch WhatsUp < 2005 SP 1A Login.asp Multiple Parameter SQL Injection
PVS ID: 3027 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:18552
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running the IpSwitch WhatsUp application, a tool for managing network hosts. This
version of IpSwitch WhatsUp is vulnerable to a remote SQL Injection flaw.\nThe login.asp
script fails to parse out SQL-reserved characters and would allow a remote attacker to read
or write data as well as potentially execute arbitrary code on the remote database
Solution: Upgrade to version 2005 SP 1A or higher.
CVE-2005-1250
Simple Machines Forum < 1.0.5 SQL Injection
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 772