(PVS) Signatures - Tenable Network Security

Description: An Informix telnet server is running on this port.
Solution: N/A
CVE Not available
phpMyAdmin < 2.6.4-RC1 Multiple XSS
PVS ID: 3193 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:19519
Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack\n\nThe
version of phpMyAdmin installed on the remote host may suffer from two cross-site
scripting vulnerabilities due to its failure to sanitize user input to the 'error' parameter of the
'error.php' script and in 'libraries/auth/cookie.auth.lib.php'. A remote attacker may use these
vulnerabilities to cause arbitrary HTML and script code to be executed in a user's browser
within the context of the affected application.
Solution: Upgrade to version 2.6.4-RC1 or higher.
CVE-2005-2869
PHP-Fusion < 6.00.11 Multiple Vulnerabilities
PVS ID: 3194 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML Injection attack.\n\nAccording to
its version number, the remote host is running a version of PHP-Fusion that suffers from an
HTML injection vulnerability. An attacker can inject malicious code using specially-crafted
posts. Successful exploitation would affect how the site is rendered to remote viewers.
Solution: Upgrade to version 6.00.11 or higher.
CVE-2005-2783
phpLDAPadmin < 0.9.6c Anonymous Bind Security Bypass
PVS ID: 3195 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:19546
Description: Synopsis :\n\nThe remote application may allow anonymous connections despite the
configuration details.\n\nThe remote host is running phpLDAPadmin, a PHP-based LDAP
browser. The version of phpLDAPadmin installed on the remote host may allow access to
an LDAP server anonymously, even if anonymous binds have been disabled in the
application's configuration.
Solution: Upgrade to version 0.9.6c or higher.
CVE-2005-2654
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 820