(PVS) Signatures - Tenable Network Security

PVS ID: 3270 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:20097
Description: Synopsis :\n\nThe remote web server is prone to denial of service attacks.\n\nThe remote
host appears to be running the WindWeb web server, which is found on embedded devices
running Wind River Systems' VxWorks such as certain ADSL modems and routers. The
version of WindWeb installed on the remote host is affected by a remote denial of service
vulnerability when it receives maliciously crafted requests. An attacker may be able to
leverage this issue to deny access to the web server to legitimate users.
Solution: No solution is known at this time.
CVE-2005-3475
Snitz Forum < 3.4.0.06 XSS
PVS ID: 3271 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
remote host appears to be running Snitz Forum, a web forum application implemented in
ASP. It is reported that versions of Snitz Forum prior to 3.4.0.06 are prone to a Cross-Site
Scripting (XSS) attack.
Solution: Upgrade to version 3.4.0.06 or higher.
CVE-2007-1374
NTOP < 3.2 ntop.init Temporary File Symlink Arbitrary File Overwrite
PVS ID: 3272 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a local flaw in the way that it creates
temporary files.\n\nThe remote host is running NTOP, a tool for viewing network
configuration, usage, statistics, protocols and much more via a web interface. This version
of NTOP is reported ot be prone to a local exploit. Specifically, a local attacker can
overwrite critical ntop temporary files, leading to an escalation of privileges.
Solution: Upgrade to version 3.2 or higher.
CVE-2005-3387
PHP < 5.0.6 GLOBAL Variable Overwrite
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3273 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running a version of PHP that is older than 5.0.6. This
version has a flaw where remote attackers can reenable the 'register_globals' parameter. In
addition, a remote attacker may be able to overwrite the 'GLOBAL' variable. This may lead
to another more serious exploitation. The remote host is running PHP version: \n %L
Family Internet Services 842