(PVS) Signatures - Tenable Network Security

Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
SonicWall Firewall Detection
PVS ID: 3619 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: The remote host is running a SonicWall Firewall.
Solution: N/A
CVE Not available
FortressSSH < 0.47 SSH_MSG_KEXINIT Logging Remote Overflow
PVS ID: 3620 FAMILY: SSH RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of the FortressSSH SSH server that is vulnerable to a remote buffer
overflow. An attacker exploiting this flaw would send a malformed key exchange.
Successful exploitation would give the attacker the ability to execute arbitrary code on the
remote server.
Solution: Upgrade to version 0.47 or higher.
CVE-2006-2421
Resin < 3.0.19 Directory Traversal and Path Disclosure Vulnerabilities
PVS ID: 3621 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote web
server is running Resin. Versions 3.0.17 and 3.0.18 are vulnerable to multiple flaws which
impact Confidentiality. An attacker exploiting these flaws would be able to disclose
physical paths and read files outside of the web server root directory. Reading of
confidential files could lead to more sophisticated attacks.
Solution: Upgrade to version 3.0.19 or higher.
CVE-2006-1953
PHP-Fusion < 6.00.308 SQL Injection
PVS ID: 3622 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nAccording to its
version number, the remote host is running a version of PHP-Fusion that suffers from a
flaw within the 'messages.php' script. messages.php fails to correctly parse user-supplied
data and is vulnerable to a SQL injection attack. An attacker exploiting this flaw would
Family Internet Services 933