(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 1.1.48 or higher.
CVE-2006-0949
SPLUNK Online Log Search Detection
PVS ID: 3456 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running SPLUNK, a web-based application that allows
remote users to search syslog log files. This application may give remote attackers the
ability to gain information useful in future attacks.
Solution: Ensure that access to SPLUNK is restricted to administrative users.
CVE Not available
Gallery < 2.0.3 GalleryUtilities.class X_FORWARDED_FOR HTTP Header XSS
PVS ID: 3457 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML Injection attack.\n\nThe remote
host is running the Gallery web-based photo album. This version of Gallery is vulnerable to
a cross-site scripting (XSS) flaw. The vendor has released version 2.0.3 as a fix. An
attacker exploiting this flaw would need to be able to convince a user to browse to a
malicious URI. Successful exploitation could lead to the loss of potentially confidential
data.
Solution: Upgrade to version 2.0.3 or higher.
CVE-2006-1127
Listserv < 14.5 Multiple Buffer Overflows
PVS ID: 3458 FAMILY: Web Servers RISK: HIGH NESSUS ID:21016
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Listserv, a mailing list management application. According to its version number,
the Listserv install on the remote host suffers from as-yet unspecified buffer overflows,
including one that reportedly can be exploited by an unauthenticated attacker to execute
arbitrary code on the affected host.
Solution: Upgrade to version 14.5 or higher.
CVE-2006-1044
Passive Vulnerability Scanner (PVS) Signatures
Retrospect Client for Windows Malformed Packet DoS
Family Internet Services 890