(PVS) Signatures - Tenable Network Security

web server.
Solution: Upgrade to version 1.4.4 or higher.
CVE-2006-0872
Warez P2P Server/Client Detection
PVS ID: 3437 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is running client software that may be considered
questionable.\n\nThe remote server is running the Warez Peer-to-Peer (P2P) client/server
application. This software is used to trade files between peers. The remote host is running
version: \n %L
Solution: Ensure that such software is in alignment with corporate policies and guidelines regarding
appropriate network usage.
CVE Not available
Fedora DS Administration Server < 1.0.1 Information Disclosure
PVS ID: 3438 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:20952
Description: Synopsis :\n\nThe remote web server is affected by an information disclosure
vulnerability.\n\nThe remote host appears to be running Fedora Directory Server, a
directory server implementation for Fedora Core. The Administration Server, which is used
to manage Fedora DS, allows an unauthenticated attacker to retrieve the admin password
hash through a simple GET request.
Solution: Upgrade to version 1.0.1 or higher.
CVE-2005-3630
Bugzilla Whinedays SQL Injection
PVS ID: 3439 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running Bugzilla, a bug-tracking software with a web interface. The version of Bugzilla
on the remote host suffers from a SQL Injection flaw. An attacker exploiting this flaw
would only need to be able to send HTTP queries to the Bugzilla application. Successful
exploitation would result in the attacker executing arbitrary commands on the remote
database server that services Bugzilla.
Solution: Upgrade to version 2.18.5, 2.20.1, 2.21.1 or higher.
CVE-2006-0916
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 884