(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running Nagios, an open-source application that allows
administrators to track the availability of network hosts.
Solution: Ensure that Nagios is only accessible from trusted IP ranges, running the latest version, and
requires strong authentication.
CVE Not available
IBM WebSphere < 6.0.2.3 Authentication Bypass
PVS ID: 3559 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote WebSphere web server is vulnerable to an
information leak. There is a flaw in the way that WebSphere processes filtered requests
which end with a '/'. For instance, if the file test.jsp required authentication, an attacker
could simply request test.jsp/ and retrieve the page.
Solution: Upgrade to version 6.0.2.3 or higher.
CVE-2006-2342
PHP-Fusion < 6.00.307 Local File Inclusion
PVS ID: 3560 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nAccording to its version number, the remote host is running a
version of PHP-Fusion that suffers from a flaw where remote attackers can specify arbitrary
'include' files which will be retrieved and displayed by the web server. An attacker
exploiting this flaw would simply need to supply '../' to the PHP-Fusion
application. Successful exploitation would result in the attacker gaining access to
confidential data.
Solution: Upgrade to version 6.00.307 or higher.
MyBB <
CVE-2006-2331
PVS ID: 3561 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote
version of MyBB does not properly parse user-supplied input to the showthread.php script.
An attacker can pass data to showthread.php such that, upon parsing, the web server is
tricked into sending a malformed SQL query to the backend database. Successful
exploitation results in the attacker executing arbitrary SQL commands on the database.
Family Internet Services 915